Biometrics presentation

by Alvaro E. Escobarby Alvaro E. Escobar 11

BiometricsBiometrics

AgendaAgendaI.I. VideoVideoII.II. Biometric OverviewBiometric OverviewIII.III. Biometric TechnologiesBiometric TechnologiesIV.IV. Accuracy MetricsAccuracy MetricsV.V. BioPrivacy ConcernsBioPrivacy Concerns



Definition:Definition:

““Automated measurementAutomated measurement of of Physiological and/or behavioral Physiological and/or behavioral characteristicscharacteristics to to determine or determine or authenticate identityauthenticate identity””



““Automated measurementAutomated measurement””No human involvement.No human involvement.Comparison takes place in Real-Time.Comparison takes place in Real-Time.

–DNA is not a BiometricDNA is not a Biometric



““Physiological and/or behavioral Physiological and/or behavioral characteristicscharacteristics““

1.1. Behavioral:Behavioral:– User speaks.User speaks.– Types on a keyboard.Types on a keyboard.– Signs name.Signs name.

2.2. Physiological:Physiological:– FingerprintFingerprint– HandHand– EyesEyes– FaceFace



““determine or authenticate identitydetermine or authenticate identity”” Identification Systems:Identification Systems:

– Who am I?Who am I?– Determine IdentityDetermine Identity

Verification Systems:Verification Systems:– Am I who I claim to be?Am I who I claim to be?– Authenticate IdentityAuthenticate Identity



““determine or authenticate identitydetermine or authenticate identity”” Verification Systems (cont):Verification Systems (cont):

– More accurate.More accurate.– Less expensive.Less expensive.– Faster.Faster.– More limited in function.More limited in function.– Requires more effort by user.Requires more effort by user.



Benefits:Benefits:– SecuritySecurity

PC, Network, WebPC, Network, Web Physical access to Buildings/RoomsPhysical access to Buildings/Rooms

– AccountabilityAccountability Audit TrailsAudit Trails RecordkeepingRecordkeeping

– Convenience Convenience – SavingsSavings



Primary drivers:Primary drivers:– Size and cost decreased.Size and cost decreased.– Improved FAR, FRR & FTEImproved FAR, FRR & FTE– Mature standards Mature standards

BioAPIBioAPI BAPIBAPI

– Public awarenessPublic awareness



Identification and verification:Identification and verification:– Finger scanFinger scan– Iris scanIris scan– Retina scanRetina scan– Facial scan (optical and infrared)Facial scan (optical and infrared)

Verification only:Verification only:– Hand GeometryHand Geometry– Voice PrintVoice Print– Keystroke BehaviorKeystroke Behavior– SignatureSignature

Other Biometric Technologies in the Other Biometric Technologies in the making.making.



Finger scan:Finger scan: Measures unique Measures unique characteristics in a fingerprint characteristics in a fingerprint (minutiae)(minutiae)

– Crossover Crossover – CoreCore– BifurcationsBifurcations– Ridge endingRidge ending– IslandIsland– DeltaDelta– PorePore



Iris scan:Iris scan:Measures unique Measures unique characteristics of the irischaracteristics of the iris

– Ridges (rings)Ridges (rings)– FurrowsFurrows– Straitions (freckles)Straitions (freckles)



Retina scan:Retina scan: Measures unique Measures unique characteristics of the retina.characteristics of the retina.

– Blood vessel patternsBlood vessel patterns– Vein patternsVein patterns



Facial scan:Facial scan: Uses off-the-shelf Uses off-the-shelf camera to measure the following facial camera to measure the following facial features:features:

– Distance between the eyes.Distance between the eyes.– Distance between the eyes and nose ridge.Distance between the eyes and nose ridge.– Angle of a cheek.Angle of a cheek.– Slope of the nose.Slope of the nose.– Facial Facial

Temperatures.Temperatures.



Hand scan: measures the top and Hand scan: measures the top and side of the hand, not the Palm.side of the hand, not the Palm.

– Hand Geometry.Hand Geometry.– Most widely used technique for Most widely used technique for

physical access.physical access.– INSpass systemINSpass system



Voice scan: Measures the sound Voice scan: Measures the sound waves of human speech.waves of human speech.

– user talks to a microphone a user talks to a microphone a passphrase.passphrase.

– Voice print is comparedVoice print is compared

to a previous oneto a previous one



Keystroke scan: Measures the time Keystroke scan: Measures the time between strokes and duration of between strokes and duration of key pressed.key pressed.

– Most commonly used in systems Most commonly used in systems where keyboard is already being where keyboard is already being used.used.



Signature scan: Measures speed, Signature scan: Measures speed, pressure, stroke order an image pressure, stroke order an image of signature.of signature.

– Non-repudiation Non-repudiation



Biometric techniques still in the Biometric techniques still in the drawing boarddrawing board

– Vein scan : vein pattern in back of the Vein scan : vein pattern in back of the hand.hand.

– Lip movement : camera captures Lip movement : camera captures images of how user lips move while images of how user lips move while user speaks a passphrase.user speaks a passphrase.



False Acceptance Rate (FAR)False Acceptance Rate (FAR) False Rejection Rate (FRR)False Rejection Rate (FRR) Failure To Enroll Rate (FTE)Failure To Enroll Rate (FTE) Ability To Verify (AVT)Ability To Verify (AVT)

– AVT = (1 - FTE)(1 - FRR)AVT = (1 - FTE)(1 - FRR)



Informational privacy concerns:Informational privacy concerns:– MisuseMisuse– Addressed by:Addressed by:

System DesignSystem Design Careful AuditCareful Audit

Personal privacy concernsPersonal privacy concerns– cultural or religious beliefscultural or religious beliefs



Bioprivacy Framework (25 best Bioprivacy Framework (25 best practices)practices)

– Scope & CapabilitiesScope & Capabilities– Data ProtectionData Protection– User Control of Personal DataUser Control of Personal Data– disclosure, auditing and disclosure, auditing and

accountability.accountability.



Scope & Capabilities:Scope & Capabilities:– Limit system scope.Limit system scope.– Limit storage of identifiable biometric Limit storage of identifiable biometric

data.data. Data Protection:Data Protection:

– Security Tools:Security Tools: EncryptionEncryption private networksprivate networks secure facilitiessecure facilities

– Limited System AccessLimited System Access



User Control of Personal Data :User Control of Personal Data :– Allow user un-enrollment (voluntarily)Allow user un-enrollment (voluntarily)– Allow user view, correct and update Allow user view, correct and update

datadata Disclosure, Auditing and Disclosure, Auditing and

Accountability:Accountability:– Explain system purposeExplain system purpose– Third party auditingThird party auditing



Q & AQ & A

Biometrics presentation

Technology

Transcript of Biometrics presentation