BIOMETRICS

1
BIOMETRICS

• Groups 21 22
• OMIS 351

2
What is it?

• Biometrics literally means life-measure
• Instead of using something you have (like a key)
  or something you know (like a password),
  biometrics uses who you are to identify you.

3
What do biometrics measure?

• Physical Characteristics
• Face
• Fingerprints
• Iris
• Veins

• Behavioral Characteristics
• Voice
• Handwriting
• Typing Rhythm
• Gait (walking stride)

4

• Biometric systems can seem complicated, but they
  all use the same three steps
• 1. Enrollment The first time you use a biometric
  system, it records basic information about you,
  like your name or an identification number. It
  then captures an image or recording of your
  specific trait.
• 2. Storage Contrary to what you may see in
  movies, most systems don't store the complete
  image or recording. They instead analyze your
  trait and translate it into a code or graph. Some
  systems also record this data onto a smart card
  that you carry with you.
• 3. Comparison The next time you use the system,
  it compares the trait you present to the
  information on file. Then, it either accepts or
  rejects that you are who you claim to be.

5
Biometrics for Dummies
6
Dispelling Some Common Myths

• Movies and television shows often depict
  biometrics in a way that is fun to watch, but not
  accurate.
• For example, you may see a whole fingerprint
  compared to other whole fingerprints until a
  computer finds a match. This method would be slow
  and difficult.
• Instead of comparing actual pictures, biometric
  systems use various algorithms to analyze and
  encode information about the trait. This
  information takes up only a few bits of space.

7
Common Myths

• Isnt forging a signature relatively easy?
• No, because handwriting biometric systems measure
  the rhythm and pressure not the end result.

This Tablet PC has a signature verification system
8
Determining Accuracy

• All biometric systems use human traits that are,
  to some degree, unique.
• Which system is best depends on the desired level
  of security.
• Most manufacturers use measurements like these to
  describe accuracy
• False Accept Rate (FAR) How many imposters the
  system accepts
• False Reject Rate (FRR) How many authorized
  users the system rejects
• Failure to Enroll Rate (FTE) How many people's
  traits are of insufficient quality for the system
  to use
• Failure to Acquire Rate (FTA) How many times a
  user must present the trait before the system
  correctly accepts or rejects them

9
Authenticate vs. Identify

• A biometric system can either authenticate that
  you are who you say you are, or it can identify
  you by comparing your information to all of the
  information on file.
• Authentication is a one-to-one comparison it
  compares your characteristic with your stored
  information.
• Identification, on the other hand, is a
  one-to-many comparison.

10
Fingerprint Biometric

• One of the most common biometric systems due to
• Affordability
• Uniqueness of Trait

11
Fingerprint Biometric

• Also less reliable
• While fingerprints are certainly unique, ease of
  duplication increases risk of compromise.

12
Facial Recognition

• Points and Distances measured
• Extremely Accurate
• Extremely Expensive
• More useful as 1-to-1 authentication, as
  1-to-many ID can slow system processor
• US Government, Casinos, other High-Risk

13
Hand and Finger Geometry

• People's hands and fingers are unique -- but not
  as unique as other traits, like fingerprints or
  irises.
• So, businesses and schools, rather than
  high-security facilities, typically use hand and
  finger geometry readers to authenticate users,
  not to identify them.

14
Hand and Finger Geometry

• Disney theme parks, for example, use finger
  geometry readers to grant ticket holders
  admittance to different parts of the park. Some
  businesses use hand geometry readers in place of
  timecards.
• Users also feel it is less invasive

15
Iris Scanning

• Although it seems futuristic, the process is
  quite simple.
• Digital Camera locates
• The center of the pupil
• The edge of the pupil
• The edge of the iris
• The eyelids and eyelashes

16
Iris Scanning

• Analysis is put into code
• Frequently used in high security applications
• Chance of mistaking one iris code for another is
  1 in 1078
• (1 in 10000000000000000000000000000000000000000000
  00000000!)

17
Iris Scanning

• Other Advantages
• A persons iris generally does not change over
  time
• Cost-Benefit Analysis
• Blind users are able to use

18
Gait and Vein Structure

• Both Gait and Vein Structure biometrics are
  cutting-edge and making advances
• Gait biometrics is the measure of ones stride,
  as no two people walk the same way.
• Still being perfected, but is useful in
  surveillance and observation (airports, terrorist
  detection, etc)

19
Vein Structure

• Vein Structure biometrics use infrared technology
  to analyze vein patterns in the hand.
• Perhaps the most unique biometric
• Certainly the most expensive system

20
How Reliable are all the Different Biometrics?
21
The Future of Biometrics

• Biometrics can do a lot more than just determine
  whether someone has access to walk through a
  particular door
• Hospitals make sure the right baby goes home
  with the right mother
• Personal use the best deterrent to the Identity
  Theft crisis, backup of vital documents like
  Birth Certificate, Social Security, etc.
• Immigration Work Visas for immigrants, which
  could significantly help the illegal immigration
  problem
• Replacement for Passports and other international
  documents vital to security.

22
The Future of Biometrics

• Current use by biometric type

23
The Future of Biometrics

• The US Government has dramatically increased
  contracts and expenditures on biometric
  implementation and research

24

• The Department of Defense recently replaced US
  Military IDs with Smart Cards
• Stores vital information like blood type, SSN, etc

25
The Future of Biometrics

• Leading the Way
• Health Care
• Transportation (aviation)
• Government
• Federal, State Local

26

• "Biometrics is just starting to explode," said
  Dee Gustowarow, manager of the access control
  solutions division at EDS, which for 10 years has
  provided biometrics services.
• International Biometric Group LLC, a consulting
  and integration services firm, estimates that the
  annual market for biometric technologies will
  grow from 1.2 billion this year to more than
  4.6 billion in 2008.

Total Biometric Spending in Recent Years
27
Growth

• Biometric technologys stage today bears a
  striking resemblance to the Internet in the early
  1990s
• New Business Opportunities/Job Creation
• High Investment Potential (one of the few
  biometric companies today could be the Microsoft
  opportunity of 1988)
• A limitless industry in terms of innovation
  capacity
• Industry should stabilize at maturity many years
  from now as opposed to crash-and-burn

28
Biometric Opposition

• Privacy Advocates
• Many people imagine a world in which cameras
  identify and track them as they walk down the
  street, following their activities and buying
  patterns without their consent.
• People may also wonder whether a huge database
  will exist somewhere that contains vital
  information about everyone in the world, and
  whether that information would be safe there.

29
Biometric Privacy

• Privacy concerns are not without merit
• At this point, however, biometric systems don't
  have the capability to store and catalog
  information about everyone in the world. Most
  store a minimal amount of information about a
  relatively small number of users
• The information in one system isn't necessarily
  compatible with others, although several
  organizations are trying to standardize biometric
  data.

30
Other Concerns

• In addition to the potential for invasions of
  privacy, critics raise several concerns about
  biometrics, such as
• Over reliance The perception that biometric
  systems are foolproof might lead people to forget
  about daily, common-sense security practices and
  to protect the system's data.
• Accessibility Some systems can't be adapted for
  certain populations, like elderly people or
  people with disabilities.
• Interoperability In emergency situations,
  agencies using different systems may need to
  share data, and delays can result if the systems
  can't communicate with each other.

31
Other Concerns

• Advocates opposing biometrics have much in common
  with other technology opponents
• Wiretaps are equally controversial
• Many called the internet into question at its
  inception, but even with little government
  regulation, most fears proven false

32
Conclusions

• Biometrics, like any other emerging technology,
  has inherent benefits and opportunities for
  misapplication or misuse
• Biometrics is an emerging technology that should
  continue its rapid growth for many years
• The potential problems with biometrics is not
  with the technology itself, but with those who
  administer it.