RiskUKNovember2017

BSIA Briefing
*For more information on
biometric technology, take a
look at the BSIA’s ‘Access
Control: Biometrics User
Guide’ which provides an
invaluable overview of the
main types of biometrics,
system architectures and the
advantages and
disadvantages of today’s
systems as well as the factors
to be considered when
choosing the right solution.
Download the BSIA’s Guide
at: www.bsia.co.uk/
web_images//publications/
181_Access control_
biometrics_user_ guide.pdf
heart dimensions are different and certainly
unique to them.
Fingerprint technology
Fingerprint technology has also developed in
recent years in order to thwart criminals from
counteracting security regimes by taking
impressions of fingerprints. With fake finger
tips capable of mimicking human skin available
to criminals, advances in optical sensor
implementation have now made it possible for
fingerprint readers to look beyond the surface
of the print to the subcutaneous layers of the
skin (such as the capillaries underneath) which
would not be as easily replicated.
Iris recognition is another area of biometrics
that has raised the bar when it comes to
accuracy. In comparison with fingerprint-based
systems, when they were first introduced, iris
systems were producing hundreds or
potentially thousands of fewer false
acceptances. These systems take an image of a
person’s iris and apply pattern recognition
algorithms. The next time the iris is presented
to the recognition reader, a comparison can
then be made with the stored pattern.
Iris systems tend to be seen most regularly in
airports, but with the introduction of biometric
passports they’re now becoming less common.
However, due to their abilities they do have a
place in specialist high security applications.
Like iris systems, facial recognition
technology has been widely available in recent
years. Apple has made use of the technology in
the creation of its new Face ID feature available
on the iPhone X which is due to be released
this month. According to Apple, the new system
is 20 times more secure than Touch ID, the
fingerprint-based system previously included
on the company’s products.
With Face ID, Apple has implemented a
secondary system that exclusively looks out for
attempts to fool the technology. Both the
authentication and spoofing defence are based
on machine learning, but while the former is
trained to identify individuals from their faces,
the latter is used to look for signs of cheating.
According to Apple: “An additional neural
network that’s trained to spot and resist
spoofing defends against attempts to unlock
your phone with photos or masks.” If a
completely perfect mask is made which fools
“Like iris systems, facial recognition technology has been
widely available in recent years. Apple has made use of the
technology in the creation of its new Face ID feature
available on the iPhone X”
the identification neural network, the defensive
system will still notice – as, indeed, would a
human. All that said, Apple’s Face ID is not
without its restrictions. The Cupertino,
California-based company has reported that it’s
not suitable for users under the age of 13 or
those with identical twins.
Advantages of biometrics
Biometric technology can be extremely
advantageous in terms of playing a
fundamental role in an extensive security
strategy. In regards to access control, the
technology is attractive to users for a number of
reasons, primarily because information cannot
be passed along to another person in the same
way that an access card or PIN might be. This
can also be useful in terms of Human Resources
management, reducing identification fraud
among employees during ‘clocking-in’.
The technology can help to eliminate security
threats that may arise when cards or PINs are
either lost or borrowed, not to mention the cost
savings made by removing the management of
lost, stolen or forgotten access cards.
This is not to say that biometric technology
doesn’t have its disadvantages, with readers
sometimes taking slightly longer to identify
users than card-based systems, particularly as
users usually have to stop and properly identify
themselves to biometric readers.
Not everyone can use biometric systems,
either. Such solutions rarely suit an external or
exposed location and, in extreme cases,
fingerprint readers can fail to identify those
users with damaged, dirty or worn fingerprints.
Additionally, it’s important to note that the
correct management of biometric systems is
critical in ensuring that any data protection
concerns are always alleviated.
As mentioned, biometrics based on brain
(electroencephalogram) and heart
(electrocardiogram) signals have emerged. A
research group at the University of Kent led by
Ramaswamy Palaniappan has shown that
people have certain distinct brain and heart
patterns specific to each individual.
The advantage of such ‘futuristic’ technology
is that it’s more fraud resistant than
conventional biometrics. However, this
technology is generally more cumbersome and
still has noted issues (such as lower accuracy
and poor reproducibility over time).
This new generation of biometric systems
has been dubbed ‘the biometrics of intent’. The
technology will analyse physiological features
such as eye movement, body temperature or
breathing and predict dangerous behaviour or
hostile intent before it translates into action.
20
www.risk-uk.com