The work performed in the eBORDER project so far comprises the following activities:
- Extensive review of the major biometric recognition techniques such as facial, iris and fingerprint recognition schemes
- SoA review on border control frameworks, identifying the characteristics of a strong and secure biometric recognition system and discusses the different security and privacy challenges.
- Investigation of different use cases and application scenarios to aid with the design of system architecture for eBORDER.
- Investigation of fifferent fusion approaches for multimodal biometric systems
- A detailed threat model for the eBORDER system was developed, using the Microsoft Threat Modeling Tool
- Definition of the overall system architecture based on a Passenger ID device utilised by the border control Officer at the border control entry point; and the eBORDER platform consisting of components implementing identification and verification services. These services include: Officer Authentication Service; Fingerprinting Identification Service; 3D Face Recognition Service; Data Fusion Service.
- Definition of the overall system requirements that included a comprehensive specification of the eBORDER user equipment, the eBORDER backend system, and the required hardware devices.
- Definition of the following essential security software components of eBORDER architecture has put: i) the Intrusion Detection System (IDS), running on the eBORDER Gateway (GW), ii) the SecureArray scheme for the eBORDER wireless environment, iii) the Officer Authentication mechanism, and iv) the Intrusion Detection and Prevention System (IDPS) running on the eBORDER mobile device.
- Advanced fingerprinting: Design of eBORDER biometric system, that provides authentication in two stages: enrolment and verification.
- Advanced facial recognition: Design of eBORDER biometric system requirements for facial recognition taking into account practical working conditions.
- Investigation of the fusion methods appropriate for application on the biometric modalities selected for the project
- High level architecture for proposed intrusion detection and prevention approach addressed.
- A detailed threat model for the eBORDER system was developed, using the Microsoft Threat Modelling Tool . The threat analysis showed 175 threats belonging to the following ten categories: i) Spoofing; ii) Tampering; iii) Repudiation; iv) Information disclosure; v) Denial of Service; vi) Elevation of privilege; vii) Malicious code injection; viii) Replay attacks; ix) Man-in-the-middle attacks; and x) Malware attacks.
- Key eBORDER device (eBORDER user equipment) security requirements were identified based on the threat analysis provided following the guidelines provided by NIST in the Draft NISTIR 8196 in terms of availability, confidentiality, authentication, and integrity.
- Identification of key eBORDER wireless communication security requirements between the identification device (eBORDER user equipment) and the eBORDER platform in terms of authentication, authorisation, data confidentiality, data integrity, and availability.
- Identification of key eBORDER backend platform security requirements in terms of authentication, authorisation, data confidentiality, data integrity, and availability.
- For demonstration purposes, a testing setup, based on Virtual Machines (VMs) on a laptop, was assumed. The testing setup was consisted of: a) a VM representing the eBORDER Gateway, where the Suricata-based IDS was installed and configured properly; b) a VM representing an eBORDER mobile device; and c) a VM representing the adversary device.
- Survey on User Authentication methods
- Definition of the integrated peripherals of the eBORDER mobile device
