Biometrics and Authentication

Shivani Kirubanandan

Lets Define !
A biometric is a physiological or behavioral characteristic of a human being that can distinguish one person from another and that theoretically can be used for identification or verification of identity.

Biometrics as Authentication
Authentication depends on
What you have What you know What you ARE !

Why Biometrics?
Identity thefts Something you know can be stolen Predicted or hacked Reliability on manual verification

Application Categories
Biometric applications available today are categorized into 2 sectors
Psychological: Iris, Fingerprints, Hand, Retinal and Face recognition Behavioral: Voice, Typing pattern, Signature

Biometric Authentication Process

Acquisition Creation of Master characteristics Storage of Master characteristics Acquisition(s) Comparison Decision

The metrics of Biometrics

FTE Failure To Enroll FTA Failure To Accept FAR False Acceptance Rates FRR False Reject Rates

Essential parameters
Liveness testing Tamper resistance Secure communication Security Threshold level Fall back node

Fingerprint recognition
Divides print into loops, whorls and arch Calculates minutiae points (ridge endings) Comparisons authentication

Fingerprint techniques
Optical Capacitive Thermal Ultrasonic

Disadvantages
Racial issues Dirt , grime and wounds Placement of finger Too big a database to process Can be spoofed liveness important!

Hand Geometry
Geometry of users hands More reliable than fingerprinting Balance in performance and usability

Disadvantage

Very large scanners

Retinal Scanning
Scans retina into database User looks straight into retinal reader Scan using low intensity light Very efficient cant be spoofed!

Disadvantages
User has to look directly FTE ratio high in this biometric Acceptability concerns
Light exposure Hygiene

Iris Scanner
Scans unique pattern of iris Iris is colored and visible from far No touch required Overcomes retinal scanner issues Contact lenses an issue?

Face recognition
User faces camera Neutral expression required Apt lighting and position Algorithms for processing Decision

Issues with Face Recognition?

Issues
Identification across expression FRR or FAR fluctuate Easily spoofed Tougher usability High Environmental impact

Behavioral
Voice Signature Typing pattern

Voice Recognition
Speech input
Frequency Duration Cadence

Neutral tone User friendly

Disadvantages
Local acoustics Background noise Device quality Illness , emotional behavior Time consuming enrollment Large processing template

Signature Recognition
Signature measures (dynamic)
Speed Velocity Pressure Captures images (static) High user acceptance

Issues
Signature variable with
Age, illness, emotions Requires high quality hardware High FRR as signatures are very dynamic

Typing Patterns
User typing pattern
Speed Press and Release Rate Unique patterns are generated comparisons

Issues
Not very scalable FRR is high Can be spoofed by simple technology (recorders)

Usability issues in Biometrics

User acceptability Knowledge of technology Familiarity with biometric characteristic Experience with device

Usability issues
Environment of use Transaction criticality Time consuming tasks

Biometric solutions
Educate Train Explain Interfaces Use Trainers Supervised Playtime

General issues
FTE posses problem Biometric characteristics are not encrypted Trust on input device Cannot authenticate computers! Privacy attack?!

Current applications
Banks Immigration facilities across USA IDwidget interesting research Eyegaze at Stanford

Class task
Sell your biometric product Case1 A bank needs an appropriate authentication mechanism to allow remote user transactions. What kind of multifactor system would you sell them?

Class task
Case 2: Suggest certain areas in which biometrics would prove disastrous Note- You may suggest a particular combination of biometrics which may be disastrous to security and privacy

Thank You!!