BIOMETRICS THE FUTURE OF SECURITY (ARE YOU SECURE YET?)

Post on 24-Dec-2015

218 views 1 download

Tags:

Transcript of BIOMETRICS THE FUTURE OF SECURITY (ARE YOU SECURE YET?)

BIOMETRICSBIOMETRICSTHE FUTURE OF SECURITYTHE FUTURE OF SECURITY

(ARE YOU SECURE YET?)(ARE YOU SECURE YET?)

BIOMETRICSBIOMETRICSTHE FUTURE OF SECURITYTHE FUTURE OF SECURITY

(ARE YOU SECURE YET?)(ARE YOU SECURE YET?)

HOW AUTHENTICATION IS HOW AUTHENTICATION IS DONE?DONE?

THE SECURITY FIELD USES THREE TYPES OF AUTHENTICATION:

•SOMETHING YOU KNOW- A PASSWORD,PIN OR

PERSONAL INFORMATION.

•SOMETHING YOU HAVE - A CARD KEY, SMART CARD OR TOKEN.

•SOMETHING YOU ARE - A BIOMETRIC

WHAT DO YOU MEAN BY WHAT DO YOU MEAN BY BIOMETRICS?BIOMETRICS?

What the Dictionaries say is

“Biometrics means - the statistical analysis of biological data”

But in today's e-speak,

“Biometrics means the precise measurement of some facet of a person's unique physical (or vocal) traits, digitizing that measurement, storing it in computer memory, and later comparing it against the same measurement when taken again later”.

HOW A BIOMETRIC SYSTEM HOW A BIOMETRIC SYSTEM WORKS?WORKS?

BIOMETRICDEVICES

BIOMETRIC ENROLLMENT

TEMPLATESTORAGE

BIOMETRICDEVICES

BIOMETRIC VERIFICATION

TEMPLATESTORAGE

BUSINESSAPPLICATIONS

12 3

8

6

7

4 5

WHAT TYPES OF WHAT TYPES OF BIOMETRICS EXISTS?BIOMETRICS EXISTS?

PRIMARY DISCIPLINES INCLUDE:

•FINGER SCAN

•FACIAL SCAN

•VOICE SCAN

•IRIS SCAN

•RETINA SCAN

•HAND SCAN

•SIGNATURE SCAN

•KEYSTROKE SCAN

WHAT TYPES OF WHAT TYPES OF BIOMETRICS EXISTS?BIOMETRICS EXISTS?

DISCIPLINES WITH REDUCED COMMERCIAL VIABILITY OR IN EXPLORATORY STAGES INCLUDE:

•DNA

•EAR SCAN

•ODOUR (HUMAN SCENT)

•VEIN-SCAN ( BACK OF HAND OR BENEATH PALM)

•FINGER GEOMETRY (SHAPE & STRUCTURE)

•NAILBED IDENTIFICATION

•GAIT RECOGNITION

HOW HARD IS TO USE HOW HARD IS TO USE BIOMETRIC TECHNOLOGIES?BIOMETRIC TECHNOLOGIES?

FINGER SCAN

Verification time 2-3 seconds

HOW HARD IS TO USE HOW HARD IS TO USE BIOMETRIC TECHNOLOGIES?BIOMETRIC TECHNOLOGIES?

FACIAL SCAN

Verification time 3-4 seconds

HOW HARD IS TO USE HOW HARD IS TO USE BIOMETRIC TECHNOLOGIES?BIOMETRIC TECHNOLOGIES?

VOICE SCAN

Verification time 4-6 seconds

HOW HARD IS TO USE HOW HARD IS TO USE BIOMETRIC TECHNOLOGIES?BIOMETRIC TECHNOLOGIES?

IRIS SCAN

Verification time 3-5 seconds

HOW HARD IS TO USE HOW HARD IS TO USE BIOMETRIC TECHNOLOGIES?BIOMETRIC TECHNOLOGIES?

RETINA SCAN

Verification time 10-12 seconds

HOW HARD IS TO USE HOW HARD IS TO USE BIOMETRIC TECHNOLOGIES?BIOMETRIC TECHNOLOGIES?HAND SCAN

Verification time 2-3 seconds

HOW HARD IS TO USE HOW HARD IS TO USE BIOMETRIC TECHNOLOGIES?BIOMETRIC TECHNOLOGIES?

SIGNATURE SCAN

Verification time 4-6 seconds

HOW HARD IS TO USE HOW HARD IS TO USE BIOMETRIC TECHNOLOGIES?BIOMETRIC TECHNOLOGIES?

KEYSTROKE SCAN

Verification time 2-3 seconds

WHAT IS INVOLVED WITH WHAT IS INVOLVED WITH BIOMETRIC ENROLLMENT?BIOMETRIC ENROLLMENT?

•ENROLLMENT

•SUBMISSION

•ACQUSITION DEVICE

•BIOMETRIC SAMPLE

•FEATURE EXTRACTION

•TEMPLATE

WHAT IS INVOLVED WITH WHAT IS INVOLVED WITH BIOMETRIC ENROLLMENT?BIOMETRIC ENROLLMENT?

TECHNOLOGY ACQUSITION DEVICE:

•FINGER SCAN - DESKTOP PHERIPHERAL,MOUSE,CHIP OR READER EMBEDDED IN KEYBOARD.

•VOICE SCAN - MICROPHONE, TELEPHONE

•FACE SCAN - VIDEO CAMERA,PC CAMERA,SINGLE IMAGE CAMERA.

•IRIS SCAN - INFRARED ENABLED VIDEO CAMERA

•RETINA SCAN- PROPRIETY DESKTOP OR WALL MOUNTABLE UNIT.

•HAND SCAN - PROPRIETY WALL MOUNTED UNIT.

•SIGN SCAN - SIGNATURE TABLET

WHAT IS INVOLVED WITH WHAT IS INVOLVED WITH BIOMETRIC ENROLLMENT?BIOMETRIC ENROLLMENT?

BIOMETRIC SAMPLE

•FINGER SCAN - FINGERPRINT IMAGE

•VOICE SCAN - VOICE RECORDING

•FACE SCAN - FACIAL IMAGE

•IRIS SCAN & RETINA SCAN - IRIS & RETINA IMAGE

•HAND SCAN - 3-D IMAGE OF TOP AND SIDES OF HAND

•SIGNATURE SCAN - IMAGE OF SIGNATURE

•KEYSTROKE SCAN - RECORDING OF CHARACTER TYPED

WHAT IS INVOLVED WITH WHAT IS INVOLVED WITH BIOMETRIC ENROLLMENT?BIOMETRIC ENROLLMENT?

FEATURE EXTRACTED

•FINGER SCAN - LOCATION & DIRECTION OF RIDGE ENDINGS AND BIFURCATION ON FINGERPRINTS

•VOICE SCAN - FREQUENCY,CADENCE & DURATION OF VOCAL PATTERN

•FACE SCAN - RELATIVE POSITION & SHAPE OF NOSE, POSITION OF CHEEKBONES

•RETINA SCAN -BLOOD VESSEL PATTERNS ON RETINA

•HAND SCAN – HEIGHT & WIDTH OF BONES & JOINTS IN HANDS & FINGERS.

•SIGN. SCAN - SPEED, STROKE ORDER AND PRESSURE

FINGERPRINT CHARACTERSTICSFINGERPRINT CHARACTERSTICS

HUMAN EYE STRUCTUREHUMAN EYE STRUCTURE

IRIS SCANIRIS SCAN

FACIAL SCANFACIAL SCAN

DO BIOMETRIC SYSTEMS DO BIOMETRIC SYSTEMS RESULT IN EXACT, 100% RESULT IN EXACT, 100%

MATCHES?MATCHES?

HOW DO BIOMETRIC SYSTEMS HOW DO BIOMETRIC SYSTEMS DETERMINE WHETHER TWO DETERMINE WHETHER TWO

TEMPLATES “MATCH”?TEMPLATES “MATCH”?

DECISION MAKING PROCESS

•MATCHING

•SCORE

•THRESHOLD

•DECISION

CAN BIOMETRIC SECURITY CAN BIOMETRIC SECURITY LEVELS BE ADJUSTED FOR LEVELS BE ADJUSTED FOR SPECIFIC TRANSACTIONS?SPECIFIC TRANSACTIONS?

DYNAMIC THRESHOLDINGDYNAMIC THRESHOLDING

WHAT IS THE DIFFERENCE WHAT IS THE DIFFERENCE BETWEEN IDENTIFICATION BETWEEN IDENTIFICATION

AND VERIFICATION?AND VERIFICATION?

WHICH IS BETTER?WHICH IS BETTER?

WHAT ARE COMMON WHAT ARE COMMON APPLICATIONS OF BIOMETRICS?APPLICATIONS OF BIOMETRICS?

•PC/LAN LOGON

•APPLICATION LOGON

•SINGLE SIGN ON(SSO)

•TIME AND ATTENDANCE

•ACCESS CONTROL

•WEBSITE ACCOUNT ACCESS AND PURCHASING

•DOUBLE DIPPING

•VERIFICATION TO A TOKEN

WHAT ARE THE BENEFITS OF WHAT ARE THE BENEFITS OF USING BIOMETRIC SYSTEM?USING BIOMETRIC SYSTEM?

FOR EMPLOYERS:

•REDUCED COSTS-PASSWORD MAINTENANCE.

•REDUCED COSTS-NO BUDDY PUNCHING.

•INCREASED SECURITY-NO SHARED OR COMPROMIZED PASSWORDS.

•INCREASED SECURITY-DETER AND DETECT FRAUDULENT ACCOUNT ACCESS.

•INCREASED SECURITY-NO BADGE SHARING IN SECURE AREAS.

•COMPETITIVE ADVANTAGE-FAMILIARITY WITH ADVANCED TECHNOLOGY

WHAT ARE THE BENEFITS OF WHAT ARE THE BENEFITS OF USING BIOMETRIC SYSTEM?USING BIOMETRIC SYSTEM?

FOR EMPLOYEES

•CONVIENIENCE-NO PASSWORD TO REMEMBER OR RESET.

•CONVIENIENCE-FASTER LOGIN.

•SECURITY-CONFEDENTIAL FILES CAN BE STORED SECURELY.

•NON REPUDIATION-BIOMETRICALLY TRANSCATIONS DIFFICULT TO REPUTE.

WHAT ARE THE BENEFITS OF WHAT ARE THE BENEFITS OF USING BIOMETRIC SYSTEM?USING BIOMETRIC SYSTEM?

FOR CONSUMERS

•CONVENIENCE-NO PASSWORDS TO REMEMBER OR RESET.

•SECURITY-PERSONAL FILES, INCLUDING EMAILS CAN BE SECURE.

•SECURITY-ONLINE PURCHASE SAFER.

•PRIVACY-ABILITY TO TRANSACT ANONYMOUSLY.

DO BIOMETRIC SYSTEMS DO BIOMETRIC SYSTEMS CHECK FOR LIVE BODY CHECK FOR LIVE BODY

PARTS?PARTS?

CAN BIOMETRIC SYSTEMS CAN BIOMETRIC SYSTEMS BE DEFEATED?BE DEFEATED?

WHICH IS THE BEST BIOMETRIC?WHICH IS THE BEST BIOMETRIC?ZEPHYR TM ANALYSIS

An “Ideal” Biometric

Key-Stroke Scan Hand-Scan

Signature-Scan

Facial-Scan

Retina-Scan

Iris-Scan

Finger-Scan

Voice-Scan

Intrusiveness

Accuracy

Cost

Effort

WHAT ARE PROBLEMS WITH WHAT ARE PROBLEMS WITH BIOMETRICS?BIOMETRICS?

FINGER-SCAN

•COLD FINGER•DRY OR OILY FINGER•HIGH OR LOW HUMIDITY•ANGLE OF PLACEMENT•PRESSURE OF PLACEMENT•LOCATION OF FINGER ON PLATTEN•CUTS TO FINGERPRINT•MANUAL ACTIVITY THAT WOULD AFFECT FINGERPRINTS(CONSTRUCTION)

WHAT ARE PROBLEMS WITH WHAT ARE PROBLEMS WITH BIOMETRICS?BIOMETRICS?

VOICE-SCAN

•COLD OR ILLNESS WHICH AFFECTS VOICE.•DIFFERENT ENROLLMENT AND VERIFICATION CAPTURE DEVICES.•DIFFERENT ENROLLMENT AND VERIFICATION ENVIRONMENT.•SPEAKING SOFTLY.•VARIATION IN BACKGROUND NOISE.•POOR PLACEMENT OF CAPTURE DEVICE.•QUALITY OF CAPTURE DEVICE.

WHAT ARE PROBLEMS WITH WHAT ARE PROBLEMS WITH BIOMETRICS?BIOMETRICS?

FACIAL-SCAN

•CHANGE IN FACIAL HAIR•CHANGE IN HAIRSTYLE•LIGHTING CONDITIONS•ADDING/REMOVING HAT AND GLASSES•CHANGE IN WEIGHT•CHANGE IN FACIAL ASPECT(ANGLE)•TOO MUCH OR TOO LITLE MOVEMENT•QUALITY OF CAPTURE DEVICE•CHANGE BETWEEN ENROLLMENT AND VERIFICATION CAMERAS( QUALITY & PLACEMENT)

WHAT ARE PROBLEMS WITH WHAT ARE PROBLEMS WITH BIOMETRICS?BIOMETRICS?

IRIS-SCAN

•TOO MUCH MOVEMENT OF HEAD OR EYE

•GLASSES

•COLORED CONTACTS

RETINA SCAN

•TOO MUCH MOVEMENT OF HEAD OR EYE

•GLASSES

WHAT ARE PROBLEMS WITH WHAT ARE PROBLEMS WITH BIOMETRICS?BIOMETRICS?

HAND-SCAN

•JWELERY

•CHANGE IN WEIGHT

•BANDAGES

•SWELLING OF JOINTS

SIGNATURE SCAN

•SIGNING TOO QUICKLY

•DIFFERENT SIGINING POSITIONS(SITTING Vs. STANDING)

WHAT ARE PROBLEMS WITH WHAT ARE PROBLEMS WITH BIOMETRICS?BIOMETRICS?

OTHER PROBLEMS:

•LONG TIME SINCE ENROLLMENT OR LAST VERIFICATION.

•AGE, ETHINICITY OR GENDER

WHAT ARE THE PERFORMANCE WHAT ARE THE PERFORMANCE METRICS FOR BIOMETRICS?METRICS FOR BIOMETRICS?

•FAILURE TO ENROLL (FTE) RATE

•FALSE MATCH RATE (FMR)

•FALSE NON MATCH RATE (FNMR)