Authentication Methods With the Focus on BIOMETRICS Ryan

Authentication Methods With the Focus on BIOMETRICS Ryan J. Gesler

Can someone please explain BIOMETRICS

Basically BIOMETRICS is… verification of a person’s identity by human qualities they possess which grants or denies them the access to a secure zone.

BIOMETRICS • Standard – Individual traits that set us all apart • Behavioral – Each person’s unique mannerisms • Cognitive – Enroll in a process using memorable info

Standard BIOMETRICS • • Facial recognition Iris Retina Hand Geometry • Fingerprints – Static – Dynamic • Palm print • DNA

Facial Recognition • Predominant – 1 D & 2 D – Geometric (feature) – Photometric (view) • Elastic Bunch Graph Matching – 3 D – Light, pose, and expression do not interfere with nodes

Eyeball Scanning Iris Retina • Colored part of the eye • Muscle that controls pupil size • Iris. Code® - 256 bytes • Unique pattern of blood vessels on the retina in the back of the eye

Hand Geometry • Pros – Ease of use, can be integrated with other technology, and small amount of data • Cons – Size, cost, and will not work for those with hand injury

Fingerprint • Used for over 100 yr • Automated systems now available • Software and hardware now measure with HD • Population is widely aware of their use

Fingerprint Static Dynamic • User thumb or finger on window scanner • Fooled more easily • User swipes digit across an opening • Fooled less easily

Palm Print • Similar methods to fingerprints • 30% of lifted prints are not fingers – Knives – Guns – Steering wheels

DNA • Odds of 2 with same DNA are 1 in billion • Obtainable by blood, saliva, hair, semen, or tissue

Standard BIOMETRICS • Drawbacks – Overall cost – Social Acceptability – Accuracy – All are not foolproof

Behavioral BIOMETRICS • • • Gait (how one walks) Dynamic signature Voice, or speech, recognition Keystroke recognition Computer footprint

Keystroke Dynamics • Combined with a password • Analyzes flight time and dwell time • Based on the rhythm of the typist

Voice Recognition Advantages • Inexpensive, quick result and non-intrusive • Text dependent – Rely on previous recordings of specifics – Asks to repeat back – Monitor an individuals sonic qualities • Text independent – Low level spectral analysis Disadvantages • Can record and playback a voice • Individual can be sick • Low accuracy

Computer Footprint • Are you accessing when you usually access? • Is it from where you usually are? • Similar to how banks monitor transactions

Cognitive BIOMETRICS • Based upon how we make decisions • Information from the user’s past that only the individual could pick out • An enrollment process that the user remembers upon returning to the site: – www. passfaces. com/demo

Security at Home and Abroad BIOMETRICS

Dept. of Justice & CJIS • Criminal Justice Information Services – Run by FBI and located in West Virginia – Criminal background checks • Supports counterterrorism and law enforcement efforts • Largest database of fingerprints – Also palm, face, voice, iris, DNA, etc.

Dept. Homeland Sec. & US-VISIT • Applies to international visitors holding a non-U. S. passport or visa (age 14 -79) • Digitally scan up to 10 fingerprints • Photograph • Individuals are asked: – Why are you visiting? – How long will you stay? • Entry procedure repeats upon exit

Dept. of Defense & BIMA • Biometrics Identity Mgmt. Agency – Formerly Biometrics Task Force (BTF) • U. S. Armed Forces Counterterrorism – Biometrics Automated Toolset (BAT) – Handheld Interagency Identity Detection Equipment (HIIDE)

BAT System in OIF & OEF • Digital camera, fingerprint reader, iris scanner, and tough book (laptop) • Populates database • Over 2, 000 deploy • Over half a million biometrics enroll

HIIDE System in OIF & OEF • Lightweight (2 lbs. ) • Collects – – Fingerprints Iris images Facial photos Biographical contextual data • Searches against internal database • Over 5, 000 in field

Thoughts on BIOMETRICS Advantages Disadvantages

Thoughts on BIOMETRICS Advantages Disadvantages • • • Requires massive, readily accessible database • Cost of equipment • Invasion of privacy No longer need ID Could prevent ID theft Catch more criminals Exonerate some innocent prisoners

Feel free to ask questions. What did you not understand? Thank You!