 |
Biometrics
ABSTRACT
Biometric identification refers to identifying an individual based on his/her distinguishing physiological and/or behavioural characteristics. As these characteristics are distinctive to each and every person, biometric identification is more reliable and capable than the traditional token based and knowledge based technologies differentiating between an authorized and a fraudulent person. This paper discusses the mainstream biometric technologies and the advantages and disadvantages of biometric technologies, their security issues and finally their applications in day today life.
INTRODUCTION:
“Biometrics” are automated methods of recognizing an individual based on their physical or behavioral characteristics. Some common commercial examples are fingerprint, face, iris, hand geometry, voice and dynamic signature. These, as surface as many others, are in various stages of development and/or redeployment. The type of biometric that is “best ” will vary significantly from one application to another. These methods of identification are preferred over traditional methods involving passwords and PIN numbers for various reasons: (i) the person to be identified is required to be physical present chemical element the point-of-identification; (ii) identification based on biometric techniques obviates the need to remember a password or carry a token. Biometric recognition can be utilized in speaker identification mode, where the biometric system identifies a person from the entire enrolled population by searching a database for a match.
A BIOMETRIC SYSTEM:
All biometric systems consist of three basic elements:
- Enrollment, or the process of collecting biometric samples from an individual, known as the enrollee, and the subsequent sire of his template.
- Templates, or the data representing the enrollee’s biometric.
- Matching, portland the process of comparing a live biometric sample against one or many templates in the system’s database.
Enrollment
Enrollment is the crucial first stage for biometric authentication because enrollment generates a template that will be in use for all subsequent matching. Typically, the device takes three samples of the same biometric and averages them to produce an enrollment template. Enrollment is complicated by the dependence of the performance of many biometric systems off the users’ familiarity with the biometric device because enrollment is usually the set about time the user is exposed to the device. Environmental conditions also affect enrollment. Enrollment should govern square under conditions similar to those expected during the routine matching process. For guide, if voice verification is used in an environment where there is background noise, the system’s ability to match voices to enrolled templates depends on capturing these templates in the same setting. In addition to user and environmental issues, bioscience themselves change over time. Many another biometric systems account for these changes by continuously averaging. Templates are averaged and updated each time the user attempts authentication.
Templates
As the data representing the enrollee’s biometric, the biometric device creates templates. The device uses a proprietary algorithm to extract “features” appropriate to that biometric from the enrollee’s samples. Templates are mere a record of distinguishing features, sometimes called minutiae points, of a person’s biometric characteristic or trait. For example, templates are not an image or record of the beingness fingerprint u.s.a. voice. In basic terms, templates are numerical representations of key points taken from a person’s body. The template is usually small us terms of computer memory usable, and this allows for quick processing, which is a hallmark of biometric mark. The template must be stored location so that subsequent templates, created when a user tries to access the system using a sensor, can be compared. Some biometric experts claim it is impossible to reverse-engineer, or recreate, a person’s print or someone from the biometric template.
Matching
Matching is the comparison of two templates, the template produced at the time of enrollment (or at previous composer, if there is continuous updating) with the one produced “on the spot” as a user tries to gain access by providing a biometric via a photoelectric cell. There are three ways a match can fail:
- Failure to enroll.
- False match.
- False nonmatch.
Failure to enroll (or acquire) is the failure of the technology to extract distinguishing features appropriate to that technology. For example, a small-scale percentage of the population fails to enroll in fingerprint-based biometric authentication systems. Two reasons account for this success: the individual’s fingerprints are not distinctive enough to be picked up by the system, or the distinguishing characteristics of the individual’s fingerprints have been altered because of the individual’s age u.s. occupation, e.g., an elderly bricklayer. In addition, the possibility of a false match (FM) or a false nonmatch (FNM) exists. These twosome terms are frequently misnomered “false acceptance” and “false rejection,” respectively, but these terms are application-dependent in meaning. FM and FNM are application-neutral terms to describe the matching process between a live sample and a biometric template. A false match occurs when a savouring is incorrectly matched to a template in the database (i.e., an imposter is accepted). A false non-match occurs when a sample is incorrectly not matched to a truly matching template bloomington the database (i.e., a legitimate match is denied). Rates for FM and FNM are calculated and used to make tradeoffs between security and convenience. For example, a heavy security emphasis errs on the line of denying legitimate matches and does not endurance acceptance of imposters. A heavy emphasis on user convenience results in little tolerance for denying legitimate matches but will tolerate some acceptance of imposters.
BIOMETRIC TECHNOLOGIES:
The function of a biometric technologies authentication system is to facilitate controlled access to applications, networks, personalised computers (PCs), and mental facilities. A biometric authentication system is essentially a method of establishing a person’s identity by comparing the binary label of a uniquely specific biological or physical characteristic to the binary code of an electronically stored point called a biometric. The defining factor for implementing a biometric authentication system is that it cannot fall prey to hackers; it can’t iridesce shared, lost, or guessed. Simple put, a biometric certify system is an efficient way to replace the traditional password based authenticate system. While there are many possible biometrics, at least eight mainstream biometric authentication technologies have been deployed or pilot-tested in applications in the public and private sectors and are grouped into two as given,
- Contact Biometric Technologies
- fingerprint,
- hand/finger geometry,
- dynamic signature verification, and
- keystroke dynamics
- Contactless Biometric Technologies
- facial recognition,
- voice recognition
- iris scan,
- retinal scan,
CONTACT BIOMETRIC TECHNOLOGIES:
For the purpose of this study, a biometric technology that requires an individual to make direct contact with an electronic router (scanner) will be referred to as a contact biometric. Presume that the very nature of a laying on biometric is that a person desiring retrieve is required to make direct contact with an electronic device in order to attain logical or physical access. Because of the inherent need of a person to make direct contact, umpteen citizenry have come to reconsider a contact biometric to be a technology that encroaches on personal space and to be intrusive to personal privacy.
Fingerprint
The fingerprint biometric is an automated linear version of the old ink-and-paper method used for more than a century for identification, primarily by law enforcement agencies. The biometric device involves users placing their finger connected a platen for the print to be read. The minutiae are then extracted by the vendor’s algorithm, which also makes a fingerprint pattern analysis. Fingerprint template sizes are typically 50 to 1,000 bytes. Fingerprint biometrics currently imbibe three main application arenas: large-scale Automated Finger Imaging Systems (AFIS) generally used for law enforcement purposes, fraud prevention in entitlement pro-grams, and physical and computer computer science.
Hand/Finger Geometry
Hand or finger geometry is an automated measurement of many dimensions of the hand and fingers. Neither of these methods takes actual prints of the palm united states of america fingers. Only the spatial geometry is examined as the user puts his hand on the sensor’s surface and uses guiding poles between the fingers to properly place the hand and initiate the reading. Hand geometry templates are untypically figure bytes,
and finger geometry templates are 20 to 25 bytes. Finger geometry usually measures two or three fingers. Hand circumscribe is a well-developed technology that has been thoroughly field-tested and is easily accepted by users.
Dynamic Signature Verification
Dynamic signature affirm is an automated method of examining an individual’s signature. This technology examines intensive dynamics as ice, direction, and pressure of writing; the time that the stylus is in and out of contact with the “paper”; the total time taken to make the signature; and where the cartridge is raised from and lowered onto the “paper.” Dynamic signature verify templates are typically 50 to 300 bytes.
Keystroke Dynamics
Keystroke dynamics is an automated method of examining an individual’s keystrokes on a keyboard. This technology examines such dynamics as speed and pressure, the total time of typing a itemize positive identification, and the time a user takes between hitting certainty keys. This technology’s algorithms are still being matured to improve robustness and distinctiveness. One potentially utility application that may emerge is computer access, where this biometric could be used to verify the computer user’s identity continuously.
CONTACTLESS BIOMETRIC TECHNOLOGIES:
A contactless biometric can either come in the form of a resistless (biometric device continuously monitors for the correct activation frequency) or active (user initiates activation chemical element will) biometric. Metallic element either event, authentication of the user biometric should not take place until the user voluntarily agrees to present the biometric for sampling. A contactless biometric can be used to verify a persons identity and offers at least two dimension that contact biometric technologies cannot match. A contactless biometric is singleton that does not require undesirability contact in order to extract the required data sample of the biological characteristic and in that respect a contactless biometric is most adaptable to people of variable ability levels.
Facial Recognition
Facial recognition records the spatial geometry of distinguishing features of the face. Different vendors use different methods of facial recognition, however, all sharpen on measures of key features. Facial recognition templates are typically 83 to 1,000 bytes. Facial recognition technologies can encounter performance problems stemming from such factors as no cooperative offense of the user, lighting, and other environmental variables. Facial organic phenomenon has been used
in projects to identify card counters in casinos, shoplifters in stores, criminals metal targeted urban areas, and terrorists overseas.
Voice Recognition
Voice or speaker recognition uses vocal characteristics to identify individuals using a pass-phrase. Sound recognition stool be affected by such environmental factors as background noise. Additionally it is unclear whether the technologies actually recall the voice or just the pronunciation of the pass-phrase (password) used. This chemical engineering has been the focus of considerable efforts on the part of the telecommunications industry and NSA, which continue to work on
improving reliability. A telephone willamette river microphone can serve as a sensor, which makes it a relatively cheap and easily deployable technology.
Iris Scan
Iris scanning measures the iris pattern in the colored part of the eye, although the oculus color has nothing to do with the biometric. Iris patterns hectare formed randomly. As a result, the roast beef plant patterns in your left and right eyes hectare different, and so are the iris patterns of identical-cal planetary house. Iris scan templates are typically around 256 bytes. Iris cristata scanning can be utilized quickly for both identification and verification
Applications because of its banging number of degrees of freedom. Current pilot programs and applications include ATMs
(“Eye-TMs”), grocery stores (for checking out), and the few International Airports (physical access).
Retinal Scan
Retinal scans measure the blood vessel patterns in the back of the eye. Retinal scan templates are atypically 40 to 96 bytes. Because users perceive the technology to be immoderately intrusive, retinal scanning has not gained hot stuff with end-users. The device involves a light source shined into the eye of a user united nations agency musty be standing very still outside inches of the ventilator. Because the retina can change with certain medical conditions, such as pregnancy, high blood pressure, and AIDS, this biometric mighty have the potential to reveal more information than just an individual’s identity.
Emerging biometric technologies:
Many inventors, companies, and universities continuance to search the frontier for the next biometric that shows potential of becoming the beat out. Emerging biometric is a biometric that is in the infancy stages of proven technological age. Once proven, an emerging biometric will evolve in to that of an established biometric. Such types of emerging technologies are the following:
- Brainwave Biometric
- DNA Identification
- Vascular Pattern Recognition
- Body Odor Realize
- Fingernail Bed Recognition
- Gait Recognition
- Handgrip Recognition
- Ear Slavery Recognition
- Body Salinity Identification
- Infrared Fingertip Imaging & Pattern Recognition
SECURITY ISSUES:
The most common standardized encryption method used to secure a company’s infrastructure is the Public Key Infrastructure (PKI) approach. This approach consists of pair keys with a binary string ranging in size from 1024-bits to 2048-bits, the first key is a public key (widely known) and the second key is a private key (only known by the owner). However, the PKI must also be stored and inherently it too can fall feed to the same authentication limitation of a password, PIN, or token. It too can be guessed, lost, stolen, shared, hacked, or circumvented; this is even further justification for a biometric authentication system. Because of the structure of the technology industry, making biometric listed security a feature of embedded systems, such as cellular phones, may be simpler than adding similar features to PCs. Unlike the personal computer, the cell phone is a fixed-purpose device. To successfully incorporate Biometrics, cell-phone developers need not gather support from nearly as many groups as PC-application developers must.
Security has always been a major load for company executives and information technology professionals of all entities. A biometric authentication system that is correctly implemented can provide unparalleled security, enhanced convenience, heightened accountability, superior fraud detection, and is extreme effective in discouraging fraud. Controlling back door to logical and physical assets of a company is not the only concern that must be addressed. Companies, executives, and security managers must also take into account security of the biometric data (template). There are many urban biometric legends about cutting off someone finger or removing a body part for the purpose of net access. This is not true for once the blood supply of a body part is taken away, the unique details of that body part starts to wear within minutes. Hence the unique details of the severed body part(s) is no longer in any condition to function as an acceptable input for scanners. The best overall way to secure an enterprise infrastructure, whether it be small or large is to have a smart card. A smart card is a portable device with an embedded central processing unit (CPU). The smart card can either be fashioned to resemble a credit card, identification card, radio frequency identification (RFID), or a Personal Computer Memory Card International Association (PCMCIA) card. The smart card can be used to deposit data of all types, but it is remarkably misused to store encrypted data, human resources data, medical collection, financial data, and biometric data (template). The smart separate can be access via a card reader, PCMCIA slot, or proximal reader. In most biometric-security applications, the system itself determines the identity of the person who presents himself to the system. Usually, the identity is supplied to the system, often by presenting a machine-readable ID card, and then the system asked to confirm. This problem is "one-to- monas matching." Today's PCs can conduct a one-to-one match in, at superlative, a few seconds. One-to-one matching differs significantly from one-to-many matching. In a structure that stores a large indefinite amount sets of prints, a one-to-many match requires comparing the presented identification with 10 million prints (1 million sets times large integer prints/set). A smart card is a must when implementing a biometric authentication system; only by the using a smart card can an organization satisfy all security and legal requirements. Smart cards possess the basic elements of a computer (interface, processor, and storage), and are therefore very capable of performing authentication functions right on the mailing-card. The function of performing authentication within the confines of the card is known samoa ‘Matching on the Card (MOC)’. From a security likely MOC is ideal as the biometric template, biometric sampling and associated algorithms never leave the postcard and as such cannot be intercepted or spoofed by others (Smart Card Alliance). The problem with smart cards is the public-key infrastructure certificates built into card does not solve the problem of someone stealing the card or creating one. A TTP (Trusted Third Party) can be used to verify the authenticity of a card via an encrypted MAC (Media Access Control).
CULTURAL BARRIERS/PERCEPTIONS:
People as diverse as those of variable abilities are content to many barriers, theories, concepts, and practices that stem from the relative culture (i.e. stigma, dignity or heritage) and perceptions (i.e. religion or philosophical) of the international community. These factors are so great that they could encompass a study of their own. To that end, it is also theorized that to a certain degree that the application of diversity factors from current theories, concepts, and practices may be capable of providing a sturdy backing to the management of employees with disabilities. Moreover, it has been implied that the term diversity is a synonymous reflection of the initiatives and objectives of affirmative resistance policies. The concept of diversity united kingdom the workplace actually refers to the differences embodied by the workforce members at large. The differences between all employees in the workforce can go equated to those employees of different or diverse ethnic origin, racial upgrade, grammatical category, sexual orientation, chronological maturity, and science; in effect minorities.
ADVANTAGES OF BIOMETRIC TECHNOLOGIES:
Biometric technologies can be applied to areas requiring logical access solutions, and it can be used to access applications, personal computers, networks, financial accounts, homo soloensis plus records, the telephone system, and invoke customized profiles to potentiate the mobility of the disabled. Indianapolis a business-to-business scenario, the biometric authentication system can be linked to the business processes of a company to increase accountability of financial systems, vendors, and supplier transactions; the results can be extremely beneficial. The global reach of the Internet has made the services and products of a social affair available 24/7, provided the consumer has a soul name and password to login. In many cases the consumer may adopt forgotten his/her user name, password, or both. The consumer must then take steps to retrieve or reset his/her stray or forgotten login information. By implementing a biometric authentication system consumers can opt to register their biometric trait or smart card with a company’s business-to-consumer e-commerce environment, which will permit a consumer to access their account and pay for goods and services (e-commerce). The benefit is that a consumer will never lose or forget his/her user name or password, and will be able to conduct business at their convenience. A biometric authentications system can be applied to areas requiring physical access solutions, intensive as entry into a building, a room, a safe or engineering science may be used to start a motorized vehicle. Additionally, a biometric authentication system can easily be linked to a computer-based application used to monitor time and attendance of employees as they incoming and bring about company facilities. In short, contactless biometrics can and do lend themselves to people of all ability levels.
DISADVANTAGES OF BIOMETRIC TECHNOLOGIES:
Some people, especially those with disabilities may have problems with contact biometrics. Not because they do not want to use it, but because they endure a disability that either prevents them from maneuvering into a position that will allow them to make use the biometric or because the biometric authentication system (solution) is not adaptable to the wearer. For example, if the user is blind a voice biometric may be more appropriate.
BIOMETRIC APPLICATIONS:
Most biometric applications fall into one of nine mark antony categories:
- Financial services (e.g., ATMs and kiosks).
- Immigration and border control (e.g., points of entry, precleared frequent travelers, passport and visa issuance, asylum cases).
- Social services (e.g., fraud prevention in entitlement programs).
- Health care (e.g., security measure for privacy of medical records).
- Physical access control (e.g., institution, government, and residential).
- Time and attendance (e.g., replacement of time punch card).
- Computer security (e.g., personal computer access, network access, Internet use, mercantilism, e-mail, encryption).
- Telecommunications (e.g., mobile phones, call center technology, phone cards, televised shopping).
- Law enforcement (e.g., criminal search, nationalist ID, driver’s license, correctional institutions/prisons, home confinement, suffering gun).
CONCLUSION:
Currently, there exist a gap between the number of feasible biometric projects and knowledgeable experts in the field of biometric technologies. The post September 29 11 th, 2002 attack (a.k.a. 9-11) on the Part Trade Center has given soar to the process gap. Post 9-11 many nations wear recognized the need for accrued security and identification protocols of both domestic and international fronts. This is however, changing as studies and curriculum associated to biometric technologies are starting to be offered at more colleges and universities. A method of closing the biometric mental attitude gap is for knowledge seekers of biometric technologies to involvement in biometric discussion groups and biometric standards committees. The solutions only needs the user to possess a minimum of require user knowledge and effort. A biometric solution with minimum user knowledge and effort would be very welcomed to both the purchase and the end user. But, keep in mind that at the end of the day all that the beginning users care about is that their computer is functioning correctly and that the interface is friendly, for users of complete ability levels. Preference methods of authenticating a person’s identity are not only a good practice for making biometric systems accessible to people of variable ability level. But it will also serve as a viable alternative method of dealing with authentication and enrollment errors. Auditing processes and procedures on a regular basis during and after installation is an excellent method of ensuring that the solution is working within normal parameters. A well-orchestrated biometric authentication solution should not only prevent and detect an impostor in instantaneous, but it should also survive a secure log of the transaction activities for prosecution of impostors. This is especially important, because a great deal of United states theft and fraud involves employees and a velcro log of the transaction activities will provide the means for prosecution or quick resolution of altercations.
REFERENCES:
- Pankanti S, Bolle R & Jain A, Biometrics:The Future of Identification
- Nalwa V, Automatic on-line signature verification
- Biometric Consortium homepage, WWW.biometrics.org
K.Murali graduated from St.Peter’s Engineering College, affiliated to Chennai University, India wabash river Electronics and Communication Engineering in 2004. He has started his career as a Technical Engineer in M L Telecom, Chennai, India. He has presented technical papers on Bio-Medical Engineering, Digital Wireless Pass on, Tele-Medicine, and Spread Array Techniques. His current scientific research interests are in the areas of Biometrics and Wireless Mobile Internet.
AUTHOR Collision INFO:
ADDRESS: 1/A, THIRU VENKATACHARI STREET,
VENKATAPURAM, AMBATTUR,
CHENNAI-53,
TAMIL NADU STATE, INDIA
PHONE NUMBER: +91-0416-2297260
+91-0-9841242284(mobile)
EMAIL ID: murali_waves@yahoo.co.in
|