State Of The Market:
Biometric Security
If you're looking to replace or
supplement login passwords
I
t's an accepted fact in IT security that there are three ways to authenticate
someone and to prove that they are in fact who they claim to be. These are:
something you know; something you have; something you are. Passwords fall
into the first category, namely something you know, and of course the big trouble
with additional technology,
with something you know is that it's fairly easy to forget it or for someone else to
there are many routes that
get to know it too. Ask anyone who's manned a support desk on the day after a long
Christmas break, and you'll appreciate just how easy it is to forget a password. One
you can take.
large bank of my acquaintance employs two people whose primary job is simply to
reset forgotten passwords. Not only is this a huge waste of money but it's also a
By Robert Schifreen
major security risk.
One way to circumvent the problems associated with something you know is to go
with the idea of something you have. Smartcards and other physical tokens fall into
this category. You can't forget a token, though you can of course forget to bring it
into the office with you. And although tokens are relatively cheap to buy, the
procedures and personnel required to issue them, reclaim them from ex employees
and so on is considerable. Nevertheless, hardware tokens in some form are proving
very popular in high security environments, especially where laptops containing
confidential information are routinely taken out of the office.
Introducing Biometrics
Surprisingly, very little attention has been paid in the past to the third concept of
authentication, namely something you are. This is the art of biometrics, ie checking
a unique characteristic of the user such as a fingerprint, smell, voice, the way he
signs his name, and so on. The concept is not a new one the ancient Egyptians used
characteristics such as scars and birthmarks to identify people many thousands of
years ago.
Although biometrics does have its problems, not least the initial cost, it can provide
an excellent way of removing the problems of forgotten passwords. However long
someone is away from the office during the Christmas period, he's unlikely to forget
to bring his finger when he returns. He can then simply place his finger on the reader
to gain instant login to the company network without the need for a password. And
in case you're wondering, there's usually a facility for an override master password
and/or fingerprint to allow support staff to access machines in cases where a user
is not physically present.
Categories
There are many features of a person that can be measured in order to generate a
unique identity code. Fingerprints are obvious, and are certainly very popular with
companies developing biometric solutions. Also popular is face recognition, in
which algorithms similar to those used in fingerprint recognition are used to
measure the distances between various components of the face. Recent develop
ments in this area allow standard cameras to analyse a face in three dimensions
rather than just two, which helps to improve accuracy if the subject doesn't always
look straight into the camera either during the enrolment or recognition phase.
Handwriting analysis is another alternative, and specifically something known as
signature dynamics. This uses a special pad (rather like a graphics tablet) or a special
pen (rather like a pen shaped mouse) to analyse the way that someone signs their
name.
Issue 139:February 2002
PC Network Advisor
File: B1426.1
page 19
Buying and Evaluating:Hardware
www.pcnetworkadvisor.com
Next page >
New! The best sites for quality inkjet printer cartridges and the best sites for cheap inkjet cartridges