Biometrics

BiometricsBiometrics

AgendaI. VideoII. Biometric OverviewIII. Biometric TechnologiesIV. Accuracy MetricsV. BioPrivacy Concerns

by Alvaro E. Escobar 1


Definition:“Automated measurement of Physiological and/or behavioral characteristics to determine or authenticate identity”



“Automated measurement”No human involvement.Comparison takes place in Real-Time.

DNA is not a Biometric



“Physiological and/or behavioral characteristics“

1. Behavioral:User speaks.

Types on a keyboard.Signs name.

2. Physiological:Fingerprint

HandEyesFace



“determine or authenticate identity” Identification Systems:

Who am I?Determine Identity

Verification Systems:

Am I who I claim to be?Authenticate Identity



“determine or authenticate identity” Verification Systems (cont):

More accurate.Less expensive.

Faster.More limited in function.

Requires more effort by user.



Benefits:Security

PC, Network, WebPhysical access to Buildings/Rooms

AccountabilityAudit Trails

RecordkeepingConvenience

Savings



Primary drivers:

Size and cost decreased.Improved FAR, FRR & FTE

Mature standards BioAPIBAPI

Public awareness



Identification and verification:Finger scan

Iris scanRetina scan

Facial scan (optical and infrared) Verification only:

Hand GeometryVoice Print

Keystroke BehaviorSignature

Other Biometric Technologies in the making.



Finger scan: Measures unique characteristics in a fingerprint (minutiae)

Crossover Core

BifurcationsRidge ending

IslandDeltaPore



Iris scan: Measures unique characteristics of the iris

Ridges (rings)Furrows

Straitions (freckles)



Retina scan: Measures unique characteristics of the retina.

Blood vessel patternsVein patterns



Facial scan: Uses off-the-shelf camera to measure the following facial features:

Distance between the eyes.Distance between the eyes and nose ridge.

Angle of a cheek.Slope of the nose.

Facial Temperatures.



Hand scan: measures the top and side of the hand, not the Palm.

Hand Geometry.Most widely used technique for physical

access.INSpass system



Voice scan: Measures the sound waves of human speech.

user talks to a microphone a passphrase.

Voice print is compared to a previous one



Keystroke scan: Measures the time between strokes and duration of key pressed.

Most commonly used in systems where keyboard is already being used.



Signature scan: Measures speed, pressure, stroke order an image of signature.

Non-repudiation



Biometric techniques still in the drawing board

Vein scan : vein pattern in back of the hand.

Lip movement : camera captures images of how user lips move while

user speaks a passphrase.



False Acceptance Rate (FAR) False Rejection Rate (FRR) Failure To Enroll Rate (FTE) Ability To Verify (AVT)

AVT = (1 - FTE)(1 - FRR)



Informational privacy concerns:

MisuseAddressed by:

System DesignCareful Audit

Personal privacy concerns

cultural or religious beliefs



Bioprivacy Framework (25 best practices)

Scope & CapabilitiesData Protection

User Control of Personal Datadisclosure, auditing and accountability.



Scope & Capabilities:Limit system scope.

Limit storage of identifiable biometric data.

Data Protection:Security Tools:

Encryptionprivate networkssecure facilities

Limited System Access



User Control of Personal Data :

Allow user un-enrollment (voluntarily)Allow user view, correct and update

data Disclosure, Auditing and Accountability:

Explain system purposeThird party auditing



Q & A


Biometrics

Documents

Transcript of Biometrics