Biometrics

Biometrics is the science of using one or more bodily characteristics to uniquely identify specific individuals. This can presently include fingerprints, geometry of a hand, voice recognition, eye (retina or iris) scanning, and facial maps. Other techniques can include DNA matching, ear lobe analysis, and typing-pattern recognition; but these are not commonly available.

While typically more secure, biometric techniques can add significant complexity to an installation.

• The most obvious consideration is up-front cost for the hardware and initial implementation.
• The database of biometric information and its security is another important consideration. If compromised, fake biometric data could be added to allow inappropriate accesses.
• How much security needed is important. The greater the security, the less tolerance there will be for false positives and the more complex the biometric mapping will likely be.
• Where the biometric template for an individual user is stored will also influence system development. If stored in a central database there may be processing delays as entire databases get searched. If stored on local machines there are security considerations as well as problems when those machines go down or individuals move to a new location. Some implementations store the template on a smart card; but then the loss of that card must be considered in the implementation.

Another consideration in implementing a biometric system is the "privacy" consideration. The common belief is that biometric data about an individual consists of things like their fingerprint or a picture of their retina. In actual fact, biometric systems typically only store a mathematical representation of the item. Users often must be convinced of this before they will accept and use a biometric identification system. For example...

• Fingerprints. Typically, 90 or more reference points are determined when the fingerprint is first registered. These points are linked via a mathematical formula and the results are stored; not the fingerprint itself. When reading, the system runs the same calculations to verify the user's identification. Some sort of heat sensor is also used to make certain the hand is alive.
• Eye Scan. The same sort of calculations used for fingerprints are used for eye scanners. The most common eye scanner scans the iris of the eye and is implemented via a camera about 18-inches from the eye. Retinal scanners, on the other hand, usually require the user to place their eye into some sort of device and then ask the user to look at a particular spot so the retina can be clearly imaged.
• Voice Recognition. One of the easiest methods to implement, voice recognition is often not particularly useful. People's voices change over time with the onset of colds or other diseases and background noise can hamper the identification task.

More Information