Embed Size (px)
Citation preview
Copyright © 2012 Accenture All rights reserved. 1
From Authentication to
Identity Recognition
Cyrille Bataller - Accenture Technology Labs
Copyright © 2012 Accenture All rights reserved. 2
• Something you have, something you know, something you are Too many cards, PINs, usernames and Pa55w0rds!
• Are my social security number, mother’s maiden name or my first school’s name really secrets?
• Why different schemes for different channels – password for web, PIN for ATM, shared secrets for call centre, ID doc in person?
• Why so many discrete authentication schemes?
Limits to Authentication…
Copyright © 2012 Accenture All rights reserved. 3
• Authentication: wasted time and energy, barrier to do business (e.g. IVR)
• Too hard to remember – here comes the sticky note! 50-75% of support calls = password reset
• Discrete, siloed authentication schemes are inherently weak – very narrow view of a person!
• Leads to inconvenience, user frustration, inefficiencies, and fraud
We Can Do Better
Copyright © 2012 Accenture All rights reserved. 4
• Holistic identity recognition – over time and across encounters
• Customer centricity – not system centricity
• Finally converging digital and physical ID
• Helping people conveniently assert their identity, while protecting their privacy and their right to anonymity!
Identity Recognition!
Copyright © 2012 Accenture All rights reserved. 5
Identity Recognition Benefits
Improving customer experience and loyalty, and quality of service…
Copyright © 2012 Accenture All rights reserved. 6
Identity Recognition Benefits
Increasing operational efficiency and cost effectiveness…
Copyright © 2012 Accenture All rights reserved. 7
Identity Recognition Benefits
Reducing fraud…
Source: US FTC
Improve effectiveness, reduce deficit
“While it should be noted that in the developed world there continues to be resistance to national ID programs for
various reasons, in the developing world, the national ID is increasingly becoming the cornerstone of a
secure and trusted ecosystem, where the ultimate goal is for the ID card or the ID number to act as the single
unique identifier in the country that supports multiple purposes and multiple applications in the private and
public spheres. These could include tax filings, salary and pension payments, border crossings, voter
verification, banking, land title registration, and so on. Very few examples of this exist today, but industry
analysts expect that within 5 years, most countries will have some form of a national ID system in place
and that these national ID systems will include biometrics.” Centre for Global Development.
“The U.S. Internal Revenue Service may have delivered more than $5 billion in refund checks to identity
thieves who filed fraudulent tax returns for 2011, Treasury Department investigators said. They estimate another
$21 billion could make its way to ID thieves' pockets over the next five years.” Source: Federal News Radio
“Identity theft rose 33% from 2005 to 2010 in the US, with 8.6M U.S. households experiencing $13.3 billion in
direct financial losses in 2010” Source: US Dept of Justice
“Identity fraud cost the UK economy £1.2 billion in one year (Identity Fraud Steering
Committee figures, 2008)” “The UK Department for Work and Pensions estimated that £800m
was lost to benefit fraud in 2006/7” “Identity fraud accounts for a criminal cash flow of
£10m per day.” “In March 2008 there were 76.8 million National Insurance numbers in the UK,
with a population of 61 million.” Source: CIFAS UK
Build for the future
Copyright © 2012 Accenture All rights reserved. 8
• A collection of data that can uniquely describe a person.
• Identity gets richer over time – with information continually associated with a person, from cradle to grave. Granularity increases (from life events to every day life events).
• What sort of information?
– What a person has, knows, is
– But also context: where she is, what she’s doing, how she’s doing it, why she’s doing it, who she’s with, in what environment, under what circumstances, what her social network says, what her transaction history is…
• This information changes over time and across encounters continuous enrolment
What Constitutes Identity?
What a person has What a person knows What a person is
The context within which this information is captured
Timeline Badge
Location
Fingerprint Credit card # Exp. date
IP address Browser data
Event 1 Event 2
at time t1 at time t2
…
Copyright © 2012 Accenture All rights reserved. 9
• Legitimate concerns on how data will be used and safeguarded
• Changing cultural attitudes, selective trust, clear benefits
• “Privacy by design”; “Privacy Impact Assessments” – ensuring proportionality, scope control, anonymisation, auditing, redress
• Procedural, technological, educational, regulatory mitigations
• Conveniently assert identity while preserving anonymity
Identity recognition can lead to enhanced privacy, protection from identity theft
Where’s Privacy Gone?
See Accenture’s “point of view on Biometrics and Privacy”
Copyright © 2012 Accenture All rights reserved. 10
• I call my bank with my mobile: caller ID (identity claim) + voice biometrics I’m recognised and dealt with immediately, with knowledge of my context
• I walk into my airline lounge: I’m booked to fly today, they have my face photograph I’m recognised and greeted by name
• I arrive at immigration, coming back into the country: API data says I’m arriving, system says my plane has landed, they have my passport photo I’m recognised and welcomed back home
• I use my tablet for shopping, it’s my home IP address, my tablet’s device ID, the camera sees my face I’m recognised and can do one-click purchase
Examples
Copyright © 2012 Accenture All rights reserved. 11
In Closing… Identity Recognition as the Foundation of Trust
• Businesses and governments increasingly see value in moving away from (weak) discrete
authentication, challenge-response methods, towards seamless, holistic identity recognition over
time and across encounters.
• This means using all data points known about a person to recognise them.
• This enables customer centricity, finally converging physical and digital ID.
• This helps improve customer experience and loyalty, and quality of service, while
increasing cost effectiveness and reducing fraud.
• It helps people conveniently assert their identity while protecting their privacy, preserving
their right to anonymity.
Copyright © 2012 Accenture All rights reserved. 12
Thank You
Cyrille Bataller Partner
Accenture 400 avenue de Roumanille, Bât 1A 06902 Sophia Antipolis, France
Tel: +33 4 92 94 88 46 Fax: +3 4 92 94 67 99 Mobile: +33 6 85 54 24 14 [email protected]
www.accenture.com/biometrics
