The document discusses self-authentication and biometrics. It notes that up to 50% of Australians are already in facial recognition databases through passports and driver's licenses. It explores moving from cards and magnetic strips to contactless payments using phones, watches, and potential implants. The document warns that as technology advances to identify people through biometrics like facial recognition, it could infringe on privacy and enable constant monitoring or "uberveillance" of individuals, with consequences for human rights. It predicts the development of a universal unique lifetime identifier for every person linked to biometrics and blockchain technology.

1. Self authentication –
is it possible or plausible?
Katina Michael
Faculty of Engineering and Information Sciences
University of Wollongong
@katinamichael | www.katinamichael.com
#ID #LBS #biometrics #implants #uberveillance @UOWResearch @IEEESSIT

2. Self-authentication
• “The act of proving that something, usually a document, is genuine or
true without the use of extrinsic evidence. For example, notarized
documents and certified copies of public records are usually deemed
to be self-authenticating.”

11. The Guardian, Jan 24, 2017

13. The Guardian, Jan 24, 2017

24. Facial Body Modifications

26. The problem?
• Up to 50 per cent of Australians are already on the federal
government's facial recognition database through their passports
• According to the Australian Bureau of Statistics, 90 per cent of NSW
and Victorian residents have their driver's licence by their mid-30s,
while between 70-80 per cent have them in their 20s.
• So what happens if you don’t drive or don’t own a passport?
• Will the feds ask private corporations to do the rest?
• Will an exception equate to suspicion?

33. What does this mean?
• Multimodal biometrics
• Facial image
• Fingerprint image
• Two factor authentication
• Biometric plus PIN
• Biometric plus card
• Biometric plus phone
• Biometrics plus implant
• Three factor authentication?
• Face verification system
• compares an existing facial image with a
facial image held by the government.
• The matching is done on a “one to one”
process in an effort to verify an individual’s
identity, “often” with the consent of the
individual.
• Face identification system
• offers “one to many” identification, using
facial recognition software to compare a
facial image to a database of facial images.
• An agency can make a request if it has a
“legislative basis or authority” to do so
“Private companies can apply to use the facial recognition software in select circumstances to compare an
identity photo with the government’s database of photos.”

34. Facial recognition NOT foolproof
• False positive
• A false positive is when the
system incorrectly accepts a
biometric sample as being a
match.
• Same as false accept.
• Why can I withdraw money from
the ATM belonging to someone
else? Because my face has
somehow been confused with
another’s.
• False negative
• A false negative is when
biometric systems fail to
recognize an authentic
individual, which would lead to
something not happening.
• Same as false reject.
• Why can’t I withdraw money
from the ATM or pay for my food
with my face?

38. Technology Responses will just grow
Companies + Police + Military + Emergency Services + Transnational Corporations
Personal/ Org
Security
National
Security
International
Security
Responsibility for action taken by
• Cloud technologies
• Drones
• DropCams
• NEST-style devices
• eWallets, Apple Watch
• Facial recognition
• Wearable technologies
• FitBits
• Chip implants
• Nanotech; e-tattoos
• DNA – celluloid sample
• OpenMaps
• Open source
• Open data
• Mobile CCTV
• Crowdsourcing
• Social media
• Activity
monitoring
• Auto-tagging
• Drones
• Sensor-based
alert systems
• Emergency
warnings
• Crowd-sourcing
coordination platform
• Autonomous drones
• Pandemic response systems
• ID management systems
• Passport Biometrics
• DNA on a chip tech
• Amplified humans
• Uberveillance
• Virus detect
• Rapid health
assessment
• Autonomous
data
collection
robots
• Robot
soldiers
• Kill lists

43. The Uberveillance Reality
• Who? Where? When? What?
• If I know:
• who you are
• where you are
• what condition you are in
then I can denote what
you are doing
• “Human activity monitoring” of
all people has consequences
for human rights
Condition
Location
Identity

44. From Magnetic Stripe to Smart Card

45. PayWave - Paving the Way
• Chip stores more securely then
magnetic-stripe
• payWave is fast
• No need for PIN for purchases
<$100
• Exact money so you don’t need
to carry cash
• Card never leaves your hand
when you make a purchase

46. ‘Tap and Go’ Mobile System
• Why carry a card at all?
• Most ubiquitous device is your
smart phone

47. BarclaycardPayBand

48. iWatch/PayBand Payment Form Factor

52. Piercing the skin…

54. Designer Apps

56. Control/ Freedom?
• When retailers begin to predict what you
will eat when you visit their store
• When insurance providers begin to make a
judgment on your habits and behaviours
and tell you how insurable you are?
• When your Facebook ID and photo
becomes your defacto ID and is cross-
matched to a government database?
• When biometrics fail because they are
spoofed?
• Then uberveillance will arrive in the form
of an embedded encrypted implantable
token that is allegedly not transferable

60. Conclusion
• Global “Trusted ID” is coming
• Universal unique lifetime identifier (ULI)
• Every person is enrolled into the system at birth
• The final guise of this “Trust Mark” is yet to be determined
• We are going through baby steps at the moment
• But it will require some form of a “mark” beyond your face
• Security is NEVER foolproof
• We will get better at catching exceptions
• Blockchain and bitcoin (among other xcoins) will play a major role
• But no matter what we do, the hackers are always one step ahead
• Auditability will be claimed to be better but for those who wish to cheat system they
will find a way and the digital realm will provide the perfect platform