Carbon Chemist

Tag: Digital Economy

  • Offline biometric authentication and tokenisation for access control

    Offline biometric authentication and tokenisation for access control

    [ad_1]

    As security demands increase, biometric authentication combined with offline processing offers a more secure solution.

    Here, CardLab explores how these technologies address key challenges in Identity, Credential, and Access Management (ICAM) while integrating with existing software solutions.

    The access control problem

    Have you ever tried to work out how many passwords you are using and how many tricks you are making to try to remember them? The result is that the same password, or simple variation of it, is often used in 25 or more different applications. This puts companies and individuals at high risk of cyber-criminal activities.

    To keep data, networks, critical infrastructure and personal identity safe, CardLab has faced the evolving security demands that traditional methods struggle to keep up with by providing a biometric authentication which combines an offline identity verification and tokenisation process to offer a significantly more convenient and secure solution.

    Passwords, tokens, and even multi-factor authentication (MFA) are under constant attack from increasingly sophisticated cyber threats and introduced complexity that fosters unsecure workarounds. Passwords can be stolen, tokens can be lost, and MFA via SMS or other online authenticators – while an improvement – can be intercepted, adds user friction, and still doesn’t fully eliminate vulnerabilities.

    biometric authentication

    biometric authentication

    Organisations face three critical challenges:

    • Inability to securely tie digital identities to real people: Traditional methods, such as passwords and usernames, cannot definitively confirm whether the person using the credentials is the rightful owner.
    • Increased cyber threat sophistication: Network-based attacks, such as man-in-the-middle and phishing, make passwords and tokens easy targets for cybercriminals.
    • Increased human failure risk: Unsecure workarounds with complex, sophisticated and manual passwords.

    These issues highlight the need for more user-friendly and secure solutions. As a minimum, offline biometric authentication using unique physical identifiers, like fingerprints, to verify identity is needed. Unlike passwords, which can be shared or hacked, biometric data offers reliable, secure, and unique identifiers that can directly verify the physical presence of a human being. When paired with offline processing, which allows verification to happen locally on the device rather than over vulnerable networks, biometric authentication offers a seamless, secure, and scalable solution for organisations of all sizes.

    Why this solution works

    Biometric authentication is inherently secure because it ties access control to something that is unique to the individual, such as a fingerprint. This means that the risk of impersonation is drastically reduced to only sniffing and ‘man in the middle’ attacks. While software encryptions, such as online syncable passkeys (like passkeys in Apple’s ecosystem or Google’s Android platform) are useful in strengthening security, biometric authentication offers an even stronger, complementary layer as it becomes person-based authentication instead of device-based. These systems can integrate seamlessly with existing encryption-based security protocols, enhancing protection and replacing reliance on password-based systems.

    Using offline biometric data verification processing, the CardLab Access solution takes security to the next level. Here’s why:

    • Biometric authentication for high security: Unlike passwords or tokens that can be stolen, biometrics such as fingerprints are unique and difficult to forge. This makes fingerprint authentication one of the most reliable ways to confirm identity. With CardLab’s solution, fingerprint data is stored locally on the card, eliminating the need for transmission over networks.
    • Offline processing for reduced exposure: One of the key advantages of this card is that the authentication process happens offline. Since no sensitive data is transmitted over networks during the identity verification process, it makes man-in-the-middle attacks, phishing, or data interception virtually impossible.
    • Tokenisation as an add-on for extra security: Tokenisation, which generates a tokenised identity upon identity verification, is offered as an optional extra layer of security. Organisations that require this added level of protection can adopt tokenisation based on their specific security needs. By framing it as an add-on option, organisations can integrate the card with varying levels of security into existing company infrastructure.
    • Communication via Near-Field Communication (NFC) and Bluetooth Low Energy (BLE): The CardLab Access card communicates via NFC and BLE, ensuring compatibility with a wide range of physical and digital access systems. Whether logging into a secure digital system or accessing a restricted physical area, the card enables secure communication without exposing sensitive biometric data.

    By addressing the limitations of traditional MFA and encryption-only solutions, CardLab’s Access products provide a comprehensive and flexible solution that enhances security and user convenience by being an ‘all in one’ MFA solution.

    The challenge of multi-factor authentication

    MFA was introduced to strengthen access control by requiring users to provide multiple credentials to gain access – usually something they know (password), something they have (a token), and something they are (biometric data). However, while MFA adds layers of security, it also introduces complexities and friction for users.

    biometric authentication

    Moreover, traditional MFA systems are still vulnerable to phishing attacks, especially when SMS, online authenticators, passwords or network-dependent tokens are involved. CardLab’s biometric authentication solution removes the need for passwords or network-based tokens, streamlining the process while enhancing security. By leveraging fingerprint authentication – the card with fingerprint sensor and tokenisation ensures an all-in-one solution: something you are (fingerprint), something you have (the card), something you create (the token generated by the card) for a robust security solution – the CardLab Access control solution can fully replace traditional MFA while providing greater ease of use.

    Real-world applications: Who benefits?

    The CardLab Access card’s form factor offers significant advantages across multiple use cases:

    • ID Card (proof of identity): The card acts as a secure form of identity, allowing users to prove who they are without needing additional credentials.
    • Physical access card (door locks): It can be used to gain access to secure areas by verifying the user’s identity through a fingerprint scan.
    • Logic access (logins): The card enables secure login to computer systems and applications, replacing the need for passwords or other network-based methods.

    These capabilities make the CardLab Access solution applicable across various industries. Here’s who benefits the most:

    Small and large enterprises

    For small and large enterprises, secure access control is a top priority, whether it’s for physical locations, sensitive IT systems, or corporate infrastructure. Many businesses struggle with password management or token-based systems that are cumbersome for employees. The CardLab Access card provides a streamlined alternative, allowing employees to authenticate quickly and securely using their fingerprint.

    tokenisation

    In addition, the NFC and BLE capabilities of the card enable it to integrate seamlessly with existing infrastructure, reducing the need for costly upgrades. This makes it a scalable solution for organisations that are growing or facing increasing security demands.

    • Small enterprises: SMEs often lack the extensive security infrastructure that large corporations have. The CardLab Access card offers an affordable way to introduce biometric authentication without disrupting daily operations.
    • Large enterprises: For global corporations managing thousands of employees and multiple access points, this solution ensures centralised control while enabling local authentication, single sign on etc. reducing the need for managing thousands of passwords and tokens.

    The card also plays a critical role in cybersecurity, as it helps protect against the rise in cybercrime. As organisations face growing threats, the card offers a FIDO 2-compliant solution that ensures compatibility with existing authentication protocols and emerging security standards.

    Government and military sectors

    In high-security environments like government offices and military facilities, access control must meet the highest security standards. The CardLab Access control solution offers robust offline biometric, tokenised authentication without relying on network communication for identity verification, ensuring that unauthorised access to sensitive government data and classified military information stays protected from cyber threats.

    By providing personal offline verification and tokenisation on the card with a fingerprint, the card ensures that only authorised individuals gain access to restricted areas or sensitive systems. This offline functionality also makes the card a valuable asset in environments where network access is restricted or prohibited.

    Financial institutions

    Financial institutions handle some of the most sensitive data in the world, and they are constant targets for cybercriminals. The CardLab Access control solution provides a solution for securing access to financial systems, vaults, and sensitive customer data without relying on network transmissions critical data. By using offline biometric verification, financial organisations can comply with strict data protection regulations like GDPR and PCI-DSS while enhancing convenience and security.

    Moreover, while the card form factor often conjures associations with payment solutions, its primary use in these institutions is access control for employees and secure areas.

    How the CardLab Access Control solution works

    CardLab’s Access Control solution brings together the power of offline biometric verification and identity tokenisation. Here’s how it works:

    1. Biometric data storage: The user’s fingerprint data is stored in a secure area on the card itself, ensuring privacy and compliance with data protection regulations.
    2. Local user verification: When attempting to access a secure system or location, the biometric data is verified locally on the card, eliminating the need for external network communication during authentication.
    3. Tokenised identity generation (optional): As an optional extra layer of security, the card generates a tokenised identity for further interaction with backend systems and company APIs. This fully protects the user’s identity and delivers dynamic tokenised access to companies and organisations, protecting against password abuse, ‘man in the middle attacks’, and AI-assisted deepfakes. It is the unbreakable link between the physical and digital identity.

    This process ensures that biometric data is never exposed to external threats while maintaining a fast and seamless user experience. Lack of biometric verification of the user’s identity means no access to systems or facilities.

    Future-proofing access control

    As cyber threats continue to evolve, organisations need to adopt solutions that provide maximum protection without sacrificing convenience. The CardLab Access control solutions address these challenges by using offline processing of biometric verification to ensure that sensitive data remains secure at every stage.

    By eliminating the need for passwords and network-dependent tokens, this card provides a future-proof access control solution that is scalable, easy to integrate with existing systems, and compliant with global privacy standards.

    Whether it’s securing enterprise facilities, protecting government data, or ensuring compliance in financial institutions, CardLab Access is the solution for the modern world of access control.

    Please note, this article will also appear in the 20th edition of our quarterly publication.

    [ad_2]

    Source link

  • UK to expand electronic travel authorisation to more visitors

    UK to expand electronic travel authorisation to more visitors

    [ad_1]

    The government is taking major steps towards delivering its ambitious aim to digitise the UK border and immigration system and has set out new implementation dates for the electronic travel authorisation (ETA) scheme.

    Everyone wishing to travel to the UK—except British and Irish citizens—will need permission to travel in advance. This can be either through an electronic travel authorisation or an eVisa.

    Eligible non-Europeans can apply for an ETA from 27 November 2024 and will need one to travel from 8 January 2025.

    They will then extend to eligible Europeans from 5 March 2025, who will need an ETA to travel from 2 April 2025.

    How does an electronic travel authorisation work?

    ETAs are digitally linked to a traveller’s passport and ensure more robust security checks are carried out before people begin their journey to the UK, helping to prevent abuse of our immigration system.

    They cost £10 and permit multiple journeys to the UK for stays of up to six months at a time over two years or until the holder’s passport expires – whichever is sooner.

    From today on, information about ETA eligibility has been available on GOV.UK.

    Anyone needing to apply for an electronic travel authorisation can do so through a quick and simple process using the UK ETA app.

    Strengthening UK border security with digital innovations

    The introduction of ETAs aligns with the approach many other countries have taken to border security, including the US and Australia.

    Minister for Migration and Citizenship Seema Malhotra explained: “Digitisation enables a smooth experience for the millions of people who pass through the border every year, including the visitors we warmly welcome to the UK who are predicted to contribute over £32bn to our tourism economy this year.

    “The worldwide expansion of the electronic travel authorisation demonstrates our commitment to enhancing security through new technology and embedding a modern immigration system.”

    People who need a UK visa to live, work, or study in the UK are now issued with an eVisa, which provides digital proof of immigration status instead of physical immigration documents, which can be lost, stolen, or tampered with.

    eVisas mean people no longer have to wait for or travel to collect a physical document, streamlining their experience.

    Replacing physical documents

    The government is asking migrants in the UK who currently use a physical immigration document, including a biometric residence permit (BRP), or a passport containing ink stamps or visa vignette stickers, to take action now and create an online account to access their eVisa.

    Most BRPs are due to expire on 31 December 2024, and BRP holders are urged to take action before their BRP expires.

    Creating the account enables people to use online services to prove their rights and manage their data, such as their personal details and passport information. It won’t impact their underlying immigration status.

    Through government funding, extra support is being provided for vulnerable people who need to take action to move from physical documents to an eVisa.

    The government continues to work closely with global airlines, maritime carriers, and rail carriers, which are crucial to ensuring the smooth implementation of the electronic travel authorisation programme.

    [ad_2]

    Source link

  • UK technology experts set to shape government digital vision

    UK technology experts set to shape government digital vision

    [ad_1]

    Millions of people will enjoy shorter waiting lists and better public services as technology leaders, inclusion advocates, and leading academics will shape the government’s new ‘digital centre’ to boost how technology is used to repair public services and drive economic growth.

    The group of technology experts, co-chaired by successful start-up founder Baroness Martha Lane Fox and Chair of the Central Digital and Data Office Paul Willmott, will help the government plan changes to how technology is used across public services.

    This is in a new bid to cut backlogs, improve service outcomes and make government services more accessible.

    It brings in leading industry experts, including Poppy Gustafson, the founder of Darktrace, as well as prominent advocates for digital inclusion and skills, such as Dr Anne-Marie Imafidon.

    Uniting technology experts for the digital transformation

    The move follows three Cabinet Office and No10 units joining DSIT to unite efforts in the digital transformation of public services under one department.

    Together, the teams currently build and manage GOV.UK, the primary platform for accessing government services and information.

    They also lead a network of over 28,000 technology experts across the public sector and develop cutting-edge AI tools for a range of uses across Whitehall and public services.

    Harnessing the power of technology will be crucial to supporting the government in achieving its mission of making public services work for working people, growing the economy, and improving the lives of everyone across the country.

    Improving public services and driving sustainable growth

    Announcing the panel today at The Times’ Tech Summit, AI and Digital Government Minister Feryal Clark said: “Poor technology slows down public services too often when new tools should be cutting waiting lists and taking the burden from citizens and the taxpayer.

    “With this new responsibility, we will be bold in our plans and the technology experts we are bringing in to advise us will help us deliver on our shared ambitions to improve public services and drive sustainable growth that works for everyone.”

    Martha Lane Fox, Entrepreneur and crossbench peer (Co-Chair), added: “The UK has an opportunity to deliver modern, reliable public services that benefit citizens while also helping to grow the economy. I am excited to help.”

    The panel includes:

    • Martha Lane Fox – Entrepreneur and crossbench peer (Co-Chair)
    • Poppy Gustafsson OBE – Technology entrepreneur and co-founder of Darktrace
    • Paul Willmott – Chair of the Central Digital and Data Office (Co-Chair)
    • Jeni Tennison – Founder and Executive Director of Connected by Data
    • Dr Anne-Marie Imafidon MBE – Social Entrepreneur, computer scientist, CEO of Stemettes
    • Lou Cordwell – Professor of Innovation, University of Manchester
    • Aaron Maniam – Fellow of Practice and Director, Digital Transformation Education, Blavatnik School of Government
    • David Eaves – Co-Deputy Director and Associate Professor at UCL
    • Sarah Hunter – Technology Policy Advisor, Board member at ARIA and Former Director of Global Public Policy at ‘X the Moonshot Factory’
    • Lisa Harrington – Tech and Growth Advisor
    • Josie Cluer – Partner, People Consulting, EY
    • Lord Richard Allan – Technology Adviser

    [ad_2]

    Source link

  • UK urged to strengthen innovation to close the global gap

    UK urged to strengthen innovation to close the global gap

    [ad_1]

    New data highlights the UK government’s need for an IP strategy to strengthen innovation and increase competition with world leaders.

    A new report has revealed that the UK ranks in the top ten globally for innovation in three key technology areas: automotive, AI, and telecoms. However, it trails behind global leaders, indicating that the UK government needs to do more to close the gap with leading nations.

    Data is published as the new Labour government targets growth through public and private investment in science and technology.

    The industry has called for the UK to have its own intellectual property strategy to support growth and strengthen innovation.

    Implementing such measures will be crucial for the UK if it wants to become a global leader.

    Which areas is the UK falling short in?

    The report, created by IP specialists and R&D tax credit experts Source Advisors, analyses the volume of innovative output from the UK compared to other territories for the three key areas.

    According to the figures, China and the US continue to dominate the rankings, representing over 50% of all patent filings in each technology area.

    The UK currently ranks 9th for automotive patents and 8th for both telecoms and AI, highlighting the need to strengthen innovation in these areas.

    The data revealed that the UK filed 2.01% of global automotive patents in the past decade. This is four times lower than in close neighbour Germany and three times lower than in the European Patent Office.

    The UK also falls short in the telecoms sector, where it filed 1.85% of global telecoms patents. Germany has filed more than double the number of telecom patents since 2010.

    The US, which is a world leader in this space, has seen 18 times more telecom innovation than the UK.

    The new government must pledge to strengthen innovation

    Following Labour’s General Election win last month, the experts have called on the new government to strengthen innovation with new discussions and policies.

    Luke Hamm, Managing Director at Source Advisors, stated: “Now the election is over, and the new government gets down to business, the headline-grabbing commitment to economic growth now must take shape in actual policy.

    “There are choices to be made regarding what we want to be famous for and how the legal and regulatory framework complements this, as well as fiscal incentives, which will drive greater levels of investment.”

    Akshay Thaman, IP Consultant & Policy Lead, commented: “This research shows that the UK sits at the lower end of the top ten for patents filed in the automotive, telecoms and AI industries. Ultimately, it highlights the level of work needed by the incoming government to position the UK to truly compete on the world stage.”

    He added: “Now, funding routes such as the R&D tax relief regime, grant funding and private investment are all crucial to driving growth and strengthening innovation.

    “However, we ask the incoming government to carefully consider the importance of intellectual property awareness, protection and commercialisation as a key lever to driving growth.

    “Other comparative nations are clearly ahead of the UK in doing this. Perhaps it’s time for the UK to have its own intellectual property strategy.”

    [ad_2]

    Source link

  • £32m for AI projects will boost productivity across UK industries

    £32m for AI projects will boost productivity across UK industries

    [ad_1]

    The UK government has unveiled AI projects to improve productivity and public services, which are supported by a share of £32 million.

    Companies developing artificial intelligence (AI) to improve safety on construction sites, reduce time spent repairing the railways, and cut emissions across supply chains are amongst a number of the AI projects.

    A total of 98 projects from Southampton to Birmingham and Northern Ireland will receive funding, involving more than 200 businesses and research organisations spanning a range of sectors, including public services, driving efficiencies, and reducing administrative tasks.

    Minister for Digital Government and AI Feryal Clark said: “We want technology to boost growth and deliver change right across the board, and I’m confident projects like these will help us realise that ambition.”

    How industries will benefit from AI innovation

    Among the AI projects is V-Lab Ltd, which has received £165,006 to further develop software powered by AI to help people train in the construction sector.

    Their system offers immersive, scenario-based virtual simulations of real construction sites to efficiently train workers on risk assessments and safety protocols.

    As part of the government’s mission to build an NHS which is fit for the future, pharmacies that deliver prescriptions across the country are also set to benefit from this new financial support.

    A project led by Nottingham-based Anteam will see them working alongside retailers and the NHS to improve the efficiency of their deliveries using AI algorithms.

    In a transformational change to how our railway network is maintained and inspected, Hack Partners will also lead the development of an entirely autonomous system which can monitor, manage, and identify defects in rail infrastructure across the country.

    This represents a significant step forward for the British public, boosting the efficiency and safety of the railway network to deliver a better service for rail users.

    Productivity in ‘high-growth’ industries

    The funding announced today will specifically support solutions in ‘high-growth’ industries, ensuring AI is at the heart of driving greater productivity and efficiency across key economic areas.

    Cambridge-based Monumo is part of a team awarded £750,152 to develop improved designs for motors in electric vehicles. Their 3D Generative-AI Tool is set to improve sustainability across sectors spanning commercial transportation, flight, and power generation.

    In the field of logistics, Robok Limited is setting to work on its SeeGul AI tool. This tool uses AI to monitor efficiency, improve resourcing, and identify bottlenecks that hamper productivity for businesses operating warehouses and storage facilities.

    Meanwhile, Kelp Technologies is collaborating with fashion retailers Depop and Selfridges to develop real-time pricing and market trend analysis to address the complexity of pricing secondhand apparel.

    The results of the project will save time and money for retailers and play an important role in growing the second-hand clothing market, reducing waste and greenhouse emissions.

    AI projects will spark economic growth

    The AI projects place UK AI innovation at the heart of the government’s plans to spark economic growth through a productivity revolution.

    The winning projects are funded through the UKRI Technology Missions Fund to secure the UK’s global leadership in emerging and future AI technologies.

    The projects are delivered through the Innovate UK BridgeAI  programme, whose additional support also includes access to training and scientific expertise, expert AI advice and guidance, and greater collaboration between businesses and developers.

    It follows the King’s Speech, in which the government committed to ‘taking the brakes off Britain’ through a raft of new Bills, including generating sustainable growth by encouraging investment in industry, skills, and new technologies.

    Dr Kedar Pandya, UKRI Technology Missions Fund Senior Responsible Owner and Executive Director of Cross-Council Programmes at UKRI’s Engineering and Physical Sciences Research Council, concluded: “The AI projects will drive AI innovation and economic growth in a diverse range of high-growth industry sectors in all nations of the UK.

    “They complement other investments made through the UKRI Technology Missions Fund, which are already helping to boost growth and productivity across the UK by harnessing the power of AI and other transformative technologies.”

    [ad_2]

    Source link