Biometrics

Related Topics:
Biometrics

For the use of statistics in biology, see Biostatistics.

Biometrics (ancient Greek: bios ="life", metron ="measure") is the study of automated methods for uniquely recognizing humans based upon one or more intrinsic physical or behavioral traits.

In information technology, biometric authentication refers to technologies that measure and analyze human physical and behavioral characteristics for authentication purposes. Examples of physical characteristics include fingerprints, eye retinas and irises, facial patterns and hand measurements, while examples of mostly behavioral characteristics include signature, gait and typing patterns. Voice is considered a mix of both physical and behavioural characteristics. However, it can be argued that all biometric traits share physical and behavioral aspects.

Operation and performance

In a typical IT biometric system, a person registers with the system when one or more of his physical and behavioral characteristics are obtained. This information is then processed by a numerical algorithm, and entered into a database. The algorithm creates a digital representation of the obtained biometric. If the user is new to the system, he or she enrolls, which means that the digital template of the biometric is entered into the database. Each subsequent attempt to use the system, or authenticate, requires the biometric of the user to be captured again, and processed into a digital template. That template is then compared to those existing in the database to determine a match. The process of converting the acquired biometric into a digital template for comparison is completed each time the user attempts to authenticate to the system. The comparison process involves the use of a Hamming distance. This is a measurement of how similar two bit strings are. For example, two identical bit strings have a Hamming Distance of zero, while two totally dissimilar ones have a Hamming Distance of one. Thus, the Hamming distance measures the percentage of dissimilar bits out of the number of comparisons made. Ideally, when a user logs in, nearly all of his features match; then when someone else tries to log in, who does not fully match, and the system will not allow the new person to log in. Current technologies have widely varying Equal Error Rates, varying from as low as 60% and as high as 99.9%.

Performance of a biometric measure is usually referred to in terms of the false accept rate (FAR), the false non match or reject rate (FRR), and the failure to enroll rate (FTE or FER). The FAR measures the percent of invalid users who are incorrectly accepted as genuine users, while the FRR measures the percent of valid users who are rejected as impostors.

In real-world biometric systems the FAR and FRR can typically be traded off against each other by changing some parameter. One of the most common measures of real-world biometric systems is the rate at which both accept and reject errors are equal: the equal error rate (EER), also known as the cross-over error rate (CER). The lower the EER or CER, the more accurate the system is considered to be.

Claimed error rates sometimes involve idiosyncratic or subjective elements. For example, one biometrics vendor set the acceptance threshold high, to minimize false accepts. In the trial, three attempts were allowed, and so a false reject was counted only if all three attempts failed. At the same time, when measuring performance biometrics (e.g. writing, speech etc.), opinions may differ on what constitutes a false reject. If a signature verification system is trained with an initial and a surname, can a false reject be legitimately claimed when it then rejects the signature incorporating a full first name?

Despite these misgivings, biometric systems have the potential to identify individuals with a very high degree of certainty. Forensic DNA evidence enjoys a particularly high degree of public trust at present (ca. 2004) and substantial claims are being made in respect of iris recognition technology, which has the capacity to discriminate between individuals with identical DNA, such as monozygotic twins.

A comparison of biometrics

The figure at the right (Yun 2003) compares several biometrics with each other against seven categories:

Universality describes how common a biometric is found in each individual.
Uniqueness is how well the biometric separates one individual from another.
Permanence measures how well a biometric resists aging.
Collectability explains how easy it is to acquire a biometric for measurement.
Performance indicates the accuracy, speed, and robustness of the system capturing the biometric.
Acceptability indicates the degree of approval of a technology by the public in everyday life.
Circumvention is how easy it is to fool the authentication system.

Yun ranks each biometric based on the categories as being either low, medium, or high. A low ranking indicates poor performance in the evaluation criterion whereas a high ranking indicates a very good performance.

Issues and concerns

As with many interesting and powerful developments of technology, excessive concern with the biometric may have the effect of eclipsing a more general critical faculty.

Identity theft and privacy issues

Concerns about Identity theft through biometrics use have not been resolved. If a person's credit card number is stolen, for example, it can cause them great difficulty since this information can be used in situations where the security system requires only "single-factor" authentication; IE, just knowing the credit card number and its expiration date can sometimes be enough to use a stolen credit card successfully. "Two-factor" security solutions requires something you know plus something you have; for example, a debit card and a personal Identification Number(PIN) or a biometric. Some argue that if a person's biometric data is stolen it might allow someone else to access personal information or financial accounts, in which case the damage could be irreversible. But this argument ignores a key operational factor intrinsic to all biometrics-based security solutions; biometric solutions are based on matching, at the point of transaction, the information obtained by the scan of a "live" biometric sample to a prestored, static "match template" created when the user originally enrolled in the security system. Most of the commercially-available biometric systems address the issues of ensuring that the static enrollment sample has not been tampered with (IE, using hash codes and encryption), so the problem is effectively limited to cases where the scanned "live" biometric data is hacked. Even then, most competently-design solutions contain anti-hacking routines. For example, the scanned "live" image is virtually never the same from scan-to-scan owing to the inherent plasticity of biometrics; ironically, a "replay" attack using the stored biometric is easily detected because it is too perfect a match.

Sociological concerns

As technology advances, and time goes on, more and more private companies and public utilities will use biometrics for safe, accurate identification. However, these advances will raise many concerns throughout society, where many may not be educated on the methods. Here are some examples of concerns society has with biometrics:

Physical - Some believe this technology can cause physical harm to an individual using the methods, or that instruments used are unsanitary. For example, there are concerns that retina scanners might not always be clean.

Personal Information - There are concerns whether our personal information taken through biometric methods can be misused, tampered with, or sold, e.g. by criminals stealing, rearranging or copying the biometric data. Also, the data obtained using biometrics can be used in unauthorized ways without the individual's consent.

Uses and initiatives

Brazil

Since the beginning of the 20th century, Brazilian citizens have used ID cards. The decision by the Brazilian government to adopt fingerprint-based biometrics was spearheaded by Dr. Felix Pacheco at Rio de Janeiro, at that time capital of the Federative Republic. Dr. Pacheco was a friend of Dr. Juan Vucetich, who invented one of the most complete tenprint classification systems in existence. The Vucetich system was adopted not only in Brazil, but also by most of the other South American countries. The oldest and most traditional ID Institute in Brazil (Instituto de Identificação Félix Pacheco) was integrated at DETRAN //www.detran.rj.gov.br/_documento.asp?cod=1438 (Brazilian equivalent to DMV) into the civil and criminal AFIS system in 1999.

Each state in Brazil is allowed to print its own ID card, but the layout and data are the same for all of them. The ID cards printed in Rio de Janeiro are fully digitized using a 2D bar code with information which can be matched against its owner off-line. The 2D bar code encodes a color photo, a signature, two fingerprints, and other citizen data. This technology was developed in 2000 in order to enhance the safety of the Brazilian ID cards.

At the end of 2005, the Brazilian government started the development of its new passport. The soon to be released new passport will include several security features. Brazilian citizens will have their signature, photo, and 10 rolled fingerprints collected during passport requests. All of the data is planned to be stored in ICAO E-passport standard. This allows for contactless electronic reading of the passport content and Citizens ID verification since fingerprint templates and token facial images will be available for automatic recognition. The project is expected to go into operation phase by the second semester of 2006.

Canada

Canada has recently introduced biometrics in the use of passports with the help of digitized photos. The passports contain a chip that holds a picture of the person and personal information such as name and date of birth.

This technology is being used at border crossings that have electronic readers that are able to read the chip in the cards and verify the information present in the card and on the passport. This method allows for increased efficiency and accuracy of identifying people at the border crossing. CANPASS, developed by Canada Customs, is currently being used by some major airports that have kiosks set up to take digital pictures of a person’s eye as a means of identification.

United States

The United States government has become a strong advocate of biometrics with the increase in security concerns in recent years. Starting in 2005, US passports with facial (image-based) biometric data were scheduled to be produced. Privacy activists in many countries have criticized the technology's use for the potential harm to civil liberties, privacy, and the risk of identity theft. Currently, there is some apprehension in the United States (and the European Union) that the information can be "skimmed" and identify people's citizenship remotely for criminal intent, such as kidnapping. There also are technical difficulties currently delaying biometric integration into passports in the United States, the United Kingdom, and the rest of the EU. These difficulties include compatibility of reading devices, information formatting, and nature of content (e.g. the US and UK currently expect to use only image data, whereas the EU intends to use fingerprint and image data in their passport RFID biometric chip(s)).

The speech made by president Bush, on May 15, 2006, live from the Oval Office, was very clear: from now on, anyone willing to go legally in the United States in order to work there will be card-indexed and will have to communicate his fingerprints while entering the country. Many foreigners will have to subject themselves to these procedures, formerly only imposed to criminals and to spies, not to immigrants and visitors, and even less to citizens.

"A key part of that system verifying documents and work eligibility of aliens should be a new identification card for every legal foreign worker. This card should use biometric technology, such as digital fingerprints, to make it tamper-proof." President W Bush (Addresses on Immigration Reform, May 15, 2006)

Germany

The biometrics market in Germany will experience enormous growth till 2009. “The market size will increase from approximately 12 million € (2004) to 377 million €” (2009). “The federal government will be a major contributor to this development” In particular, the biometric procedures of fingerprint and facial recognition can profit from the government project [http://www.researchandmarkets.com/reports/c4206/. In May 2005 the German Upper House of Parliament approved the implementation of the ePass, a passport issued to all German citizens which contain biometric technology. The ePass has been in circulation since November 2005, and contains a chip that initially will hold a digital photo of the holder's face. “Starting in March 2007, fingerprints also will be stored on the chips – one from each hand” “A third biometric identifier – iris scans – could be added at a later stage” [http://europa.eu.int/idabc/en/document/4338/194. An increase in the prevalence of biometric technology in Germany is an effort to not only keep citizens safe within German borders but also to comply with the current US deadline for visa-waiver countries to introduce biometric passports In addition to producing biometric passports for German citizens, the German government has put in place new requirements for visitors for apply for visas within the country. “Only applicants for long-term visas, which allow more than three months' residence, will be affected by the planned biometric registration program. The new work visas will also include fingerprinting, iris scanning, and digital photos” [http://www.migrationinformation.org/Feature/display.cfm?ID=141.

Germany is also one of the first countries to implement biometric technology at the Olympic Games to protect German athletes. “The Olympic Games is always a diplomatically tense affair and previous events have been rocked by terrorist attacks - most notably when Germany last held the Games in Munich in 1972 and 11 Israeli athletes were killed” ^*.

Biometric technology was first used at the Olympic Summer Games in Athens, Greece in 2004. “On registering with the scheme, accredited visitors will receive an ID card containing their fingerprint biometrics data that will enable them to access the 'German House'. Accredited visitors will include athletes, coaching staff, team management and members of the media” ^*.

Australia

Australia uses biometrics a lot. Visitors who want to come go to Australia will soon have to provide biometric identification, such as fingerprint to get a visa to enter the country. There is a lot of identity theft happening, so to ensure that this does not take place in Australia the use of biometrics will be a benefit. When presented at customs they will be able to tell if the person who is applying for the visa matches the person who is in front of them. This makes it easier to catch a person who goes to great lengths to steal other people’s identity. As a result of using biometric in this manner the police have information about the people wanting visas to come to Australia. This provides security, in making sure there aren’t any “shady” persons entering. Their Immigration Department is also considering a biometric visa system to ensure the safety of their country by tightening security along their borders. Biometric data is already collected from many visa applicants by Immigration, particularly those applying under humanitarian grounds. According to James Riley, in an article he wrote on May 16th of 2006 he stated “It would also help the department avoid high-profile bungles such as the wrongful detention of Cornelia Rau or the unlawful deportation of Vivian Alvarez” Other uses of Biometrics are now in process according to Senator Vanstone. Senator Vanstone stated "In a short time digital fingerprints will be used instead of keys by Australians to lock our cars and our houses and used by credit card companies to ensure that the person who owns the card is the one using the card." It has been said that they will be investing 495 million dollars in making biometrics a part of the different management systems. Biometrics in Australia has also been used in fitness centers to see how much persons are in health programs. The device that is especially made for this is called multimedia fingerprint. This encouraged healthier workplaces. According to Troy Grogan, chief executive officer of CareTrac and workplace health consulting company AlphaOne, “the devices encouraged healthier workplaces by giving employee members a "mobile membership". He means that if you want to continue your programs and you work in an area that is not the gym you signed up for, you have instant entry to any one of the gyms within the national network because your fingerprint has been recorded. Another way Australian’s has used biometrics is to protect their borders by the use of a smartgate. This is said to come in effect in early of 2007. The smart gate takes a picture of your face just when you present yourself at customs, and then compares it with the picture you have in your passport to make sure that you are indeed the same person. The government of Australia has invested 61.7 over the next for years to ensure that smartgate would be implemented in all the major Australian airports.

References

Biometric news portal Dedicated portal for biometric systems and products: fingerprint, iris, retina, hand, palm vein, voice and DNA recognition and identification.
When to Use Biometrics A paper by Hagai Bar-El on the less evident shortcomings of biometric systems for over-the-net authentication.
A Brief History of Biometrics Retrieved March 19, 2005.
M2SYS TECHNOLOGY - Vendor Provides Accelarated Fingerprint Adoption Technology
TechSense Ventures Group - Biometrics and fingerprint technology in Singapore.
Reconhecimento Automático de Impressões digitais: O Sistema de Identificação do Estado do Rio de Janeiro
Maker of Biometric Devices - Biometrics and fingerprint technology.
Ashborn, Julian. "Guide to Biometrics". Springer Professional Computing. 1st edition. 2004
Access Control news portal Authoritative news site for access control and for biometric systems and products
Yun, Yau Wei. The ‘123’ of Biometric Technology, 2003. Retrieved from on November 21, 2005 from the World Wide Web: http://www.itsc.org.sg/synthesis/2002/biometric.pdf
Biometric Digest newsletter. Published monthly with weekly updates. 64 issues per year. Primary source of news & information, vendors, case studies, calendar of events for expositions & conferences, financial reports, names in the news and more. http://www.mydocsonline.com/pub/wrogers/26Mar.pdf
“Biometrics in Australia.” (2006). Retrieved 2006-06-11. http://www.biometricsaustralia.com/
“Biometrics Institute Aaustralia Conference”. (2006). Retrieved 2006-06-11. http://www.biometricsinstitute.org/displaycommon.cfm?an=1&subarticlenbr=62
“Biometrics an emerging Technology: Market Report Australia”(2005) Retrieved 2006-06-11. http://www.buyusainfo.net/docs/x_1689471.pdf
“Germany clears biometric passports plan.” (2005). Globe and Mail.com Insider Edition. Retrieved 2006-06-11. (http://www.theglobeandmail.com/servlet/Page/document/v4/sub/MarketingPage?user_URL=http://www.theglobeandmail.com%2Fservlet%2Fstory%2FRTGAM.20050708.gtgermanyjul8%2FBNStory%2FTechnology%2F&ord=1150044536595&brand=theglobeandmail&force_login=true)
“Germany to phase-in biometric passports from November 2005”. (2005). E-Government News. Retrieved 2006-06-11. (http://europa.eu.int/idabc/en/document/4338/194)
Oezcan, V. (2003). “Germany Weighs Biometric Registration Options for Visa Applicants”, Humboldt University Berlin. Retrieved 2006-06-11. (http://www.migrationinformation.org/Feature/display.cfm?ID=141)
Sturgeon, W. (2004). “Biometrics used to keep German Olympians safe...but what are they testing - moustache or mullet?” Security Strategy Sillicon.com Retrieved 2006-06-11.(http://software.silicon.com/security/0,39024655,39123078,00.htm)
“The Biometrics Market in Germany 2004-2009: Anti-terrorism Laws Drive Growth” (2004). Soreon Research. Retrieved 2006-06-11 (http://www.researchandmarkets.com/reports/c4206/)

Biometrics

Operation and performance

A comparison of biometrics

Issues and concerns

Identity theft and privacy issues

Sociological concerns

Uses and initiatives

Brazil

Canada

United States

Germany

Australia

See also

References

External Links

Gourt Home::Gourt :: Biometrics

Operation and performance

A comparison of biometrics

Issues and concerns

Identity theft and privacy issues

Sociological concerns

Uses and initiatives

Brazil

Canada

United States

Germany

Australia

See also

References

External Links