News and insight into biometric identification and authentication

Questions raised about biometrics usability if data is hacked

Thursday, February 25, 2010

Various security and technology experts have voiced their opinions and worries regarding the potential flaws in adopting biometric systems for use with physical and logical access control systems or other uses where an individual’s authentication would be required, according to an S C Magazine article.

While many have raised concerns regarding the adoption of biometric systems dealing a number of privacy-related issues, these experts take a slightly different angle looking into how useful biometric technology is assuming a leak of data.


Guy Churchwood, CEO of IT infrastructure consultancy company LogLogic, first looks at biometrics in the form of logical access control comparing it to having one password that can never be changed. Further, Andrew Clarke, vice president and managing director of the Europe Middle East and Africa region for access control security company e-DMZ Security, looked specifically at fingerprint scanners citing them as inherently flawed due to their visual-based authentication leaving them very open to fraud. Clarke adds that not only are the systems open to fraud, but that obtaining an individual’s fingerprint sample is also very simple. A third expert, CTO of authentication technology developer Imprivata David Ting, went on to elaborate further speaking to flaws dependent on where and how the password data is stored and matched.

All three experts, however, agree with having multiple factors of authentication, such as biometrics and a password. While each of them acknowledges that a leak of biometric data would still constitute potentially damaging and irreversible data being in the hands of someone it should not be, utilizing a second form of authentication on systems would significantly reduce the usefulness of such stolen data to a fraudster or criminal.

Read the full story here[end] 

DigitalPersona has announced the release of new biometric solution for digital access management, data protection and communication security.

The solution, called DigitalPersona Pro Enterprise, is capable of full disk encryption, two-factor virtual private network authentication utilizing biometrics and smart cards, fingerprint biometrics, is integrated with Microsoft Active Directory and can all be managed from a central system.

read more »

Apricorn, a developer of personal data storage technology, has announced the availability of new larger storage capacity offerings from their Aegis Bio line of biometric hard drives. The original Aegis Bio offerings had a storage ceiling of 250 GB, however the new offerings add on a 320 GB, 500GB and a 640 GB drive to the line of offerings.

read more »

Ceelox has announced that it has finished development of a prototype application that would use Ceelox’s fingerprint biometrics to enable biometric authentication in online environments such as corporate intranets, cloud computing networks and commercial applications like online banking and other personal account-based access.

read more »

The July meeting of the influential Government Smart Card Interagency Advisory Board (IAB) was recently held in Washington D.C. FIPS201.com was on hand to cover the event and has provided, as a service to the IAB and the smart card community, an audio recording of the presentations. Click on the link below to access a list of audio and accompanying PowerPoint slides (in pdf format).

read more »

In order to share information about various deployments and uses of PIV credentials there will be an information sharing day for federal officials on Aug. 4. The purpose of the ICAM Information Sharing Day is to provide an forum for agencies to understand and share information related to implementation activities being taken by early adopters of ICAM programs.

read more »

Integrated Biometrics was touting its light emitting sensing fingerprint biometrics at the ISC West show. Jim Seaborn, vice president of business development at Integrated Biometrics, talked about how the technology uses a different type of fingerprint sensor that is resistant to “spoofing,” or using a fake biometric to fool a scanner.

read more »