Tomorrow Land is Today - Biometrics
By Robert Witham,
BIS Security Analyst
Using biological measurements as identification, biometric technology available
today includes: facial recognition, fingerprint and voiceprint analysis, signature and
hand metrics, vein mapping, iris and retinal scans, and combined metrics!

I remember watching "DisneyLand" on television as a kid. My favorite segment
was Tomorrow Land where they showed all sorts of whiz-bang gadgets. Ill bet Walt
Disney never dreamed of this though:
I arrive at work, and as I walk toward the door, a video camera records my entry,
recognizes who I am, and unlocks the door for me.
I sit down at my desk, insert a smartcard into a slot on my keyboard, and my computer
says, "Good Morning Bob, how are you?"
"Fine," I answer.
"Please present thumbprint for authentication," says the computer.
I grasp my mouse, placing my thumb on the integrated thumbprint reader.
"Please state your passphrase," the computer demands.
"I need Warp power in ten seconds Scotty, or youre fired," I say
into the microphone.
"Welcome aboard Captain," says the computer, which proceeds to
complete my network logon.
Ah, technology! While this might sound futuristic, all this technology - called
biometrics - exists today, and often at a surprisingly reasonable cost. Biometrics is the
science of using biological measurements as identification. It allows computers to
recognize people just as people do. Lets look at the technology used in the above
example.
Smartcards are credit card sized devices that contain an integrated circuit
chip. These chips can be programmed with almost any information. In my example above, the
smartcard contains information on my facial and voice patterns, thumbprint, and also my
digital certificate. Smartcards cost about $4 each in quantity, the software approximates
$50 and the reader keyboard costs about $300!
Facial recognition looks at your face, and maps certain features. Usually, you
need to move your head a bit so that the recognition software can tell the difference
between a photo of you and the real you. The map of your face is compared to a database,
and a match is generally made in less than a second. Facial recognition software is
available that provides logon to NT or Windows 95/98 systems for about $65, and can
utilize the webcam on your PC. The door access system above uses technology that can also
recognize faces in a crowd, or recognize individual faces. Had a stranger been walking to
the door with me, the door would not have opened.
Fingerprint analysis uses a small electronic scanner the reads your fingerprint.
These scanners can be stand alone, or incorporated into a mouse or keyboard. Such devices
and software can be obtained for about $200.
Voice analysis is based on a recorded passphrase. When you supply your
passphrase to the appropriate software, your identify can be confirmed. This biometric can
be used in conjunction with automated helpdesk software to allow automatic password reset
without intervention by helpdesk personnel. Voice analysis software that will perform a
Windows 95/98 logon can be purchased for about $80. The microphone on your PC can be used
for input.
In coming issues, Ill provide more information on other biometric measurements,
and their applications in the real world.
|