Jump to content

Biometric device

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Bear475 (talk | contribs) at 14:57, 28 July 2018 (→Biometric spoofing: grammar correction one's -> ones). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

IRIS scanner in action to identify people

A biometric device is a security identification and authentication device. Such devices use automated methods of verifying or recognising the identity of a living person based on a physiological or behavioral characteristic. These characteristics include fingerprints, facial images, iris and voice recognition.[1]

History

Biometric devices have been used by man over a long period of time. Non-automated biometric devices have used us since 500 BC [2] as it was seen that Babylonian business transactions were recorded on clay tablets that included fingerprints. Automation in Biometric devices was first seen in the 1960s.[3] The FBI in the 1960s, introduced the Indentimat, which started checking for fingerprints to maintain criminal records. The first systems measured the shape of the hand and the length of the fingers. Although discontinued in the 1980s, the system set a precedent for future Biometric Devices.

Subgroups

The characteristic of the human body are used to access information by the users. According to these characteristics, the sub-divided groups are:

  • Chemical biometric devices: Analyses the segments of the DNA to grant access to the users.
  • Visual biometric devices: Analyses the visual features of the humans to grant access which includes IRIS recognition, Face recognition, Finger recognition and Retina Recognition.
  • Behavioural biometric devices: Analyses the Walking Ability and Signatures (velocity of sign, width of sign, pressure of sign) distinct to every human.
  • Olfactory biometric devices: Analyses the odour to distinguish between varied users.
  • Auditory biometric devices: Analyses the voice to determine the identity of a speaker for accessing control.

Uses

Workplace

IRIS and Fingerprint recognition at Heathrow Terminal 4

Biometrics are being used to establish better and accessible records of the hours employee's work. With the increase in "Buddy Punching"[4]( a case where employees clocked out coworkers and fraudulently inflated their work hours) employers have looked towards new technology like fingerprint recognition to reduce such fraud. Additionally, employers are also faced with the task of proper collection of data such as entry and exit times. Biometric devices make for largely foul proof and reliable ways of enabling to collect data as employees have to be present to enter biometric details which are unique to them.

Immigration

As the demand for air travel grows and more people travel, modern day airports have to implement technology in such a way that there are no long queues. Biometrics are being implemented in more and more airports as they enable quick recognition of passengers and hence lead to lower volume of people standing in queue's. One such example is of the Dubai International Airport which plans to make immigration counters a relic of the past as they implement IRIS on the move technology (IOM) which should help the seamless departures and arrivals of passengers at the airport.[5]

Handheld and personal devices

Fingerprint sensors can be found on mobile devices. The fingerprint sensor is used to unlock the device and authorize actions, like money and file transfers, for example. It can be used to prevent a device from being used by an unauthorized person.

Present day biometric devices

The signature is authenticated by the spaces taken in each square

Personal signature verification systems

This is one of the most highly recognised[6] and acceptable biometrics in corporate surroundings. This verification has been taken one step further by capturing the signature while taking into account many parameters revolving around this like the pressure applied while signing, the speed of the hand movement and the angle made between the surface and the pen used to make the signature. This system also has the ability to learn from users as signature styles vary for the same user. Hence by taking a sample of data, this system is able to increase its own accuracy.

Iris recognition system

Iris recognition involves the device scanning the retina of the subject and then cross referencing that to data stored on the database. It is one of the most secure forms of authentication, as while fingerprints can be left behind on surfaces, iris prints are extremely hard to be stolen. Iris recognition is widely applied by organisations dealing with the masses, one being the Aadhar identification carried out by the Indian government to keep records of its population. The reason for this is that iris recognition makes use of iris prints of humans, which hardly evolve during one's lifetime and are extremely stable.

Problems with present day biometric devices

Biometric spoofing

Using fine powder and a brush to reveal and copy fingerprints

Biometric spoofing is a method of fooling[7] a biometric identification management system, where a counterfeit mold is presented in front of the biometric scanner. This counterfeit mold emulates the unique biometric attributes of an individual so as to confuse the system between the artifact and the real biological target and gain access to sensitive data/materials.

One such high-profile case of Biometric spoofing came to the limelight when it was found that German Defence Minister, Ursula von der Leyen's fingerprint had been successfully replicated [8] by the Chaos Computer Club Group. The group used high quality camera lenses and shot images from 6 feet away. They used a professional finger software and mapped the contours of the Ministers thumbprint. Although progress has been made to stop spoofing. Using the principle of pulse oximetry[9]- the liveliness of the test subject is taken into account by measure of blood oxygenation and the heart rate. This reduces attacks like the ones mentioned above, although these methods arent commercially applicable as costs of implementation are high. This reduces their real world application and hence makes biometrics insecure until these methods are commercially viable.

Accuracy

Accuracy is a major issue with biometric recognition. Passwords are still extremely popular, because a password is static in nature, while biometric data can be subject to change (such as one's voice becoming heavier due to puberty, or an accident to the face, which could lead to improper reading of facial scan data). When testing voice recognition as a substitute to PIN-based systems, Barclays reported[10] that their voice recognition system is 95 percent accurate. This statistic means that many of its customers' voices might still not be recognised even when correct. This uncertanity revolving around the system could lead to slower adoption of biometric devices, continuing the reliance of traditional password-based methods.

Benefits of biometric devices over traditional methods of authentication

  • Biometric data cannot be lent and hacking of Biometric data is complicated [11] hence it makes it safer to use than traditional methods of authentication like passwords which can be lent and shared. Passwords don't have the ability to judge the user but rely only on the data provided by the user, which can easily be stolen while Biometrics work on the uniqueness of each individual.
  • Passwords can be forgotten and recovering them can take time, whereas Biometric devices rely on biometric data which tends to be unique to a person, hence there is no risk of forgetting the authentication data. A study conducted among Yahoo users found that at least 1.5 percent [12] of Yahoo users forgot their passwords every month, hence this makes accessing services more lengthy for consumers as the process of recovering passwords is lengthy. These shortcomings make Biometric devices more efficient and reduces effort for the end user.

Future

Researchers are targeting the drawbacks of present-day biometric devices and developing to reduce problems like biometric spoofing and inaccurate intake of data. Technologies which are being developed are-

  • The United States Military academy are developing an algorithm [13] that allows identification through the ways each individual interacts with their own computers; this algorithm considers unique traits like typing speed, rhythm of writing and common spelling mistakes. This data allows the algorithm to create a unique profile for each user by combining their multiple behavioural and stylometric information. This can be very difficult to replicate collectively.
  • A recent innovation by Kenneth Okereafor [14] and [15], presented an optimized and secure design of applying biometric liveness detection technique using a trait randomization approach. This novel concept potentially opens up new ways of mitigating biometric spoofing more accurately, and making impostor predictions intractable or very difficult in future biometric devices. A simulation of Kenneth Okereafor's biometric liveness detection algorithm using a 3D multi-biometric framework consisting of 15 liveness parameters from facial print, finger print and iris pattern traits resulted in a system efficiency of the 99.2% over a cardinality of 125 distinct randomization combinations. The uniqueness of Okereafor's innovation lies in the application of uncorrelated biometric trait parameters including intrinsic and involuntary biomedical properties from eye blinking pattern, pulse oxymetry, finger spectroscopy, electrocardiogram, perspiration, etc.
  • A group of Japanese Researchers have created a system [16] which uses 400 sensors in a chair to identify the contours and unique pressure points of a person. This derrière authenticator, still undergoing massive improvements and modifications, is claimed to be 98 percent accurate and is seen to have application in anti theft device mechanisms in cars.
  • Inventor Lawrence F. Glaser has developed and patented technology which appears at first to be a high definition display. However, unlike displays with 2 dimensional pixel arrays, this technology incorporates pixel stacks, accomplishing a series of goals leading to the capture of a multi-biometric. It is believed to be the first man-made device which can capture 2 or more distinct biometrics from the same region of pixel stacks (forming a surface) at the same instant, allowing for the data to form a third biometric, which is a more complex pattern inclusive as to how the data aligns. An example would be to capture the finger print and the capillary pattern at precisely the same moment. Other opportunities exist with this technology, such as to capture kirlean data which assures the finger was alive during an event, or capture of bone details forming another biometric used with the others previously mentioned. The concept of stacking pixels to achieve increased functionality from less surface area is combined with the ability to emit any color from a single pixel, eliminating the need for RGB (RED GREEN BLUE) surface emissions. Lastly, the technology was tested with high power cadmium magnetics to check for distortion or other anomalies, as the inventor wanted to also embed magnetic emission and magnetic collection with this same surface technology, but without exhibiting any magnetic stripes on the surface. Devices, such as smart cards, can pass magnetic data from any orientation by automatically sensing what the user has done, and using data about where the card is when "swiped" or inserted into a reader. This technology can detect touch or read gestures at distance, without a user side camera and with no active electronics on its surface. Reference material and drawings are available at the US Patent Office, US Patent #s 9065893, 9122966 and published specification 20150356285. The use of Multibiometrics hardens automated identity acquisition by a factor of 800,000,000 and will prove to be very difficult to hack or emulate.

http://appft.uspto.gov/netacgi/nph-Parser?Sect1=PTO2&Sect2=HITOFF&p=1&u=%2Fnetahtml%2FPTO%2Fsearch-bool.html&r=7&f=G&l=50&co1=AND&d=PG01&s1=lawrence.IN.&s2=glaser.IN.&OS=IN/lawrence+AND+IN/glaser&RS=IN/lawrence+AND+IN/glaser

References

  1. ^ Wayman, James; Jain, Anil.; Maltonie, Davide.; Maio, Dario (2005). An Introduction to Biometric Authentication Systems. Boston, MA: Springer London. pp. 1–20. ISBN 978-1-85233-596-0.
  2. ^ Mayhew, Stephen. biometricupdate.com http://www.biometricupdate.com/201501/history-of-biometrics. Retrieved 24 October 2015. {{cite web}}: Missing or empty |title= (help)
  3. ^ Zhang, David. Automated Biometrics: Technologies and Systems. Springer Science & Business Media. p. 7. ISBN 9781461545194.
  4. ^ R, Josphineleela; Ramakrishnan, Dr.M. (March 2012). "An Efficient Automatic Attendance System Using Fingerprint Reconstruction Technique". International Journal of Computer Science and Information Security. 10 (3): 1. arXiv:1208.1672. Bibcode:2012arXiv1208.1672R.
  5. ^ Basit, Abdul (20 October 2015). "Dubai Airport without immigration counters?". Khaleej Times. Retrieved 28 October 2015.
  6. ^ M.M Fahmy, Maged (5 November 2010). "Online handwritten signature verification system based on DWT features extraction and neural network classification" (PDF). Ain Shams Engineering Journal. 1 (1): 59–70. doi:10.1016/j.asej.2010.09.007. Retrieved 4 November 2015.
  7. ^ Trader, John. "Liveness Detection to Fight Biometric Spoofing". Retrieved 4 November 2015.
  8. ^ "German minister fingered as hacker 'steals' her thumbprint from a PHOTO". The Register. 29 Dec 2014. Retrieved 21 October 2015.
  9. ^ Reddy, P.V; Kumar, A; Rahman, S; Mundra, T.S. "A New Antispoofing Approach for Biometric Devices". EEE TRANSACTIONS ON BIOMEDICAL CIRCUITS AND SYSTEMS. 2 (4): 328–337. doi:10.1109/tbcas.2008.2003432. Retrieved 23 October 2015.
  10. ^ "Say goodbye to the pin: voice recognition takes over at Barclays Wealth". The Telegraph. Retrieved 22 October 2015.
  11. ^ O’Gorman, Lawrence. "Comparing Passwords, Tokens, and Biometrics for User Authentication". Proceedings of the IEEE. 91 (12): 2021–2040. doi:10.1109/jproc.2003.819611. Retrieved 30 October 2015.
  12. ^ Florencio, Dinei; Herley, Cormac. "A Large-Scale Study of Web Password Habits". WWW 2007 / Track: Security, Privacy, Reliability, and Ethics: 657. doi:10.1145/1242572.1242661.
  13. ^ Funk, Wolfgang; Arnold, Michael; Busch, Christoph; Munde, Axel. "Evaluation of Image Compression Algorithms for Fingerprint and Face Recognition Systems". 2005 IEEE Information Assurance Workshop.
  14. ^ K. U. Okereafor, C. Onime and O. E. Osuagwu, "Multi-biometric Liveness Detection - A New Perspective," West African Journal of Industrial and Academic Research, vol. 16, no. 1, pp. 26 - 37, 2016 (https://www.ajol.info/index.php/wajiar/article/view/145878)
  15. ^ K. U. Okereafor, C. Onime and O. E. Osuagwu, "Enhancing Biometric Liveness Detection Using Trait Randomization Technique," 2017 UKSim-AMSS 19th International Conference on Modelling & Simulation, University of Cambridge, Conference Proceedings, pp. 28 – 33, 2017 (http://uksim.info/uksim2017/CD/data/2735a028.pdf)
  16. ^ Malenkovich, Serge. "10 Biometric Security Codes of the Future". kaspersky.com. Retrieved 28 October 2015.
Retrieved from "https://en.wikipedia.org/w/index.php?title=Biometric_device&oldid=852374425"