Katholieke Universiteit Leuven
Two research groups participate to TURBINE from the Katholieke Universiteit Leuven:
- COSIC (Computer Security and Industrial Cryptography)
- ICRI (Interdisciplinary Centre for Law & ICT)
The profile and contribution of each reearch group is described here below.
COSIC (Computer Security and Industrial Cryptography) is a research group of the K.U.Leuven and the goal of its research activities is to create a secure electronic equivalent for interactions in the physical world such as confidentiality, signatures, identification, anonymity, payments and elections. The research concentrates on the design, evaluation, and implementation of cryptographic algorithms and protocols, on the development of security architectures for information and communication systems and on the development of security mechanisms for embedded systems. One of its well-known successes is the selection of Rijndael as the Advanced Encryption Standard (AES).
Contribution to TURBINE
From its experience in previous identity management activities and its strong expertise in cryptography and information security, COSIC will contribute to the development of the requirements and the definition of processes to generate and revoke multiple identities. Furthermore it will take the lead of the sub project on cryptographic protocols for trusted identity. Its main tasks will be drafting the security requirements and performing a thorough assessment of the TURBINE solutions. Based on these results COSIC will formulate recommendations for developers of future systems for biometric template protection.
ICRI (Interdisciplinary Centre for Law & ICT) is a research group within the law faculty of the K.U.Leuven with a focus on information technology and communications law. The centre is also part of the Interdisciplinary Broad Band Institute (IBBT), a research institute established by the Flemish government across various institutions. On information technology, ICRI conducts research in the field of privacy, identity management and the protection of personal data in various domains, such as in egovernment and in ehealth. ICRI is involved in numerous national and international projects, including projects on advanced applications for electronic identity cards (ADAPID), the future of identity in the information society (FIDIS) and privacy and identity management for Europe (PRIME and the follow up PRIMELIFE).
Contribution to TURBINE
Researchers of ICRI will contribute to the current debate on biometrics and privacy by providing a legal analysis of the use of fingerprint for identity management applications with its research in TURBINE. From its experience in previous identity management activities, ICRI will provide legal input in the definition of the requirements for the identity management system and advice on the demonstrator functionalities and set-ups. Furthermore, ICRI will take the lead in the establishment of the Advisory Board for TURBINE, which will include Data Protection Advisory members. Based on these activities and results, ICRI will formulate practical guidelines for a privacy friendly implementation of fingerprint in ID verification applications.