Geoff Lacy

Outline  Definition  Technology  Types of biometrics Fingerprints Iris Retina Face Other ○ Voice, handwriting, DNA  As an SA

Definition  “Biometrics is the science and technology of measuring and analyzing biological data.”

How does Biometric tech work?  Biometrics do not create a picture to compare to.  Makes use of a template. ○ Creates a template using an distinctive features Login template Challenge template Sensitivity is based on how close to the login template the challenge template is.

Sensitivity  False Accept Rate or False Positive Rate the probability that the system incorrectly matches the input pattern to a non-matching template in the database.  False Reject Rate or False Negative Rate the probability that the system fails to detect a match between the input pattern and a matching template in the database.

Fingerprint  Most common Biometric  Optical scanning and Capacitance scanning  Uses minutiae, or distinctive features.

Pros and cons of fingerprint  Pros Cheap Easy Widely used Most people are comfortable with providing fingerprints Can’t write down fingerprint or forget it  Cons Can be faked Mythbusters Fingerprints can be damaged

Iris  The iris is the colored ring around the pupil of every eye and no two are alike  Measures the pattern of the colors in the iris  Some ATM’s use this technology  United Arab Emirates IrisGuard's Homeland Security Border Control has been operating in the United Arab Emirates (UAE) since 2001, all customs agencies are equipped with iris scanners.

Pros and cons of Iris  Pros Iris recognition is rarely impeded by glasses or contact lenses It can be scanned from 10cm to a few meters away. The iris remains stable over time as long as there are no injuries and a single enrolment scan can last The iris is an internal organ that is largely protected by damage and wear by the cornea.  Cons Can be faked Been faked with a high definition photos of a face The accuracy of scanners can be affected by changes in lighting Iris scanners are significantly more expensive than some other forms of biometrics.

Retina  Retina is the back of the eye.  Measures the pattern of the veins.  The idea for retinal identification was first conceived by Dr. Carleton Simon and Dr. Isadore Goldstein and was published in the New York State Journal of Medicine in The idea was a little before its time, but once technology caught up, the concept for a retinal scanning device emerged in 1975.

Pros and cons of Retina  Pros Low occurrence of false positives Extremely low (almost 0%) false negative rates Highly reliable because no two people have the same retinal pattern Speedy results: Identity of the subject is verified very quickly Very difficult to fake ○ Requires live tissue  Cons Measurement accuracy can be affected by cataracts or severe astigmatism Not very user friendly o Scanning procedure is perceived by some as invasive o Subject being scanned must be close to the camera optics High equipment costs

Face  Template created from Eigen Faces. 2-D image  A newly emerging trend, claimed to achieve improved accuracies, is three- dimensional face recognition. This technique uses 3D sensors to capture information about the shape of a face. This information is then used to identify distinctive features on the surface of a face, such as the contour of the eye sockets, nose, and chin

Problems with Privacy  People don’t seem to like being identified from cameras. In January 2001, the city of Tampa, Florida used the technology to scan the faces of people in crowds at the Super Bowl, comparing them with images in a database of digital mug shots. Tampa then installed cameras equipped with face recognition technology in their Ybor City nightlife district, where they have encountered opposition from people wearing masks and making obscene gestures at the cameras. In late August 2001, a member of the Jacksonville, Florida City Council proposed legislation to keep the technology out of Jacksonville.

Voice, Handwriting, DNA  Voice Never became popular due to background sound issues  Handwriting People often change there signature. However popular in some places.  DNA Currently takes a long time for DNA results. Maybe in a few years it might be more popular?

As a System Admin  If you need level three authentication. Who you are Biometrics is supposed to increase confidentiality and availability. ○ Confidentiality is increased by securing the data with better authentication techniques. Biometrics is realistically impossible to brute force. ○ Availability is increased because it is easier to log in with a biometric as opposed to a token card or password.  What Security level do you need?  Is it within budget?