数字身份中的生物识别技术

September 2023 Contents Executive summary05 Introduction08 Sector Case Studies16 Challenges32 Conclusions36 37 References Executive summary The immediately obvious differential for any consumer using digital identity, and biometricdata instead of existing, knowledge-based, manually-input, user name/password andadditional multi-factor authentication safeguards (e.g. SMS) to either: 1.onboard to an online service as a new customer2.login to an online service as a returning customer is that the user experience is fast, convenient and secure, requiring little or no manualinteraction. The higher level of assurance inherent within properly implemented biometrics servicescan also play a significant part in developing trust in digital services by protecting bothconsumers and businesses reducing fraud and financial crime. For businesses, biometrics allows them to streamline and simplify their internal operationalprocesses, lower costs and concentrate resources on growing revenue. Being able to quickly, conveniently and securely access government, banking and other onlineservices, significantly reduce queues and traffic congestion in the travel and transport sectorsand work from your home or other remote locations without the constant need to rememberand manually input a myriad of different user names and passwords, these in turn beingaugmented by an additional security layer of multi-factor authentication in the form of SMSor email-generated security codes, authentication apps or similar is the nut that the digitalindustry has been trying to crack for a number of years now. Remembering unique login details which might be used only once a year can proveproblematic for citizens wanting to submit their annual tax return, the physical checking ofpaper documentation at airport check-ins and ‘binding’ of a ticket to an individual takes time,is susceptible to human error and can lead to the type of airport terminal congestion and at passport control that we have all experienced. The disruption caused at Dover and otherports in recent years are another stark reminder of our continuing reliance on outmodedprocesses that depend on the production of correctly presented paper-based documentationand the negative impact it can inflict on the UK economy. It is against this background that the advantages of implementing secure, high level ofassurance biometric service platforms across both government and industry start tobecome clear. Put simply, the use of biometric data, properly implemented can transform your customersonboarding and login experiences by removing almost all manual inputting of knowledge-based attributes such as user-names, passwords and security codes and doing so in away that is significantly more secure – inherent in properly implemented biometric serviceplatforms it is, by an order of magnitude, significantly more difficult for even the mostorganised and creative fraudsters to replicate (more on this in the report) - than any of theseexisting methods. What the reader may not yet realise is the extent to which biometric data to verify andauthenticate online has proliferated in recent years, particularly during the recent globalepidemic which focused the minds of businesses and governments globally to accelerate thepace at which biometrics and other innovative technology could be adopted, with McKinseyreporting an overall seven-year increase in digital adoption as a direct result, even ten years inparts of Asia.1 Digital identity utilising biometric technology is today enabling individuals to identifythemselves online or authenticate a transaction in much the same manner that we mightpreviously have used a combination of username, password, memorable information, andmulti-factor authentication. It is clear therefore that the increasing proliferation of biometricdata as an attribute to verify and authenticate means the days of manually inputtingusernames, passwords and additional, knowledge-based multi-factor authentication maysoon be over entirely. This innovative and transformative technology is freely available to many consumers today,most obviously in the online banking, health and travel sectors as demonstrated in thefollowing chapter on Sector Case Studies. Perhaps the best-known example of this was theNHS’s decision to incorporate biometrics (fingerprint and/or facial recognition) as a means ofonboarding and accessing the NHS App.2 For individuals and businesses, the use of biometric attributes can deliver a significant upliftin the end-user experience without compromising on security and providing the higher level ofassurance necessary to ensure that the person they are dealing with is indeed who they saythey are. Whilst the case for biometric identity verification and authentication has been extensivelymade already, more is required to accelerate adoption as the Government and businessesexplore potential use cases and how to transition from legacy technologies. Given theclear bene