Case Study

Biometric Access Control

The regular prox-card system does not provide access to the inner sanctum, Joe's actual office suite: He must enter through a door equipped with a biometric lock and handle that use scan thermal imaging technology

Page 2

While fingerprint technologies are more widely adopted, retinal scanning is growing in popularity, and facial recognition technologies have advanced from traditional 2-D, to 3-D scanning.

Bioscrypt, a division of L-1 Identity Solutions in Stamford, Conn., offers 3-D face recognition technology that makes it possible to collect more data points than the previous 2-D technology. For instance, while 2-D face recognition relies on such data as the distance between the eyes, 3-D scanning relies on structural information, such as the skull curvature, which doesn't change over time or as a result of facial swelling caused by an accident or weight loss or gain, unless it's extreme. Expect to pay as much as $45,000 for a sophisticated 3-D face reader for access control, while face recognition readers for network access can cost as little as $20 to $30 per user.

Other lesser-known technologies are breaking into the market as well. Palm vein authentication devices read the very complicated, hard-to-reproduce vein patterns found deep within the hand. Fingerprints, in contrast, are based on making contact, and can be "lifted" from a glass surface and duplicated using commonly found ingredients.

A key advantage of palm vein authentication, product vendors say, is that it uses "no touch" technology, enabling it to be used when hands are dirty or wet, or even if the skin surface is scratched. Since the hand never touches the sensor's surface while being scanned, it is ideal for germ-sensitive environments, such as a laboratory. Palm vein authentication devices also record the name, date and time of each entrant's arrival and departure.

Israel-based BioGuard Components & Technologies launched its Palmguard biometric authentication system in April. The desktop device is a combination of Fujitsu's PalmSecure biometric palm vein authentication sensor and a smart-card reader or writer device. When a user positions a hand 3 cm to 6 cm above the sensor's surface, the sensor emits a near-infrared beam to the palm, according to BioGuard's website. The light beam passes the skin layers and reaches the veins. The reduced oxygen in the blood flowing back to the heart absorbs the near-infrared light. This absorption will be recorded by the sensor's camera as a raw image, which is then encrypted.

The encrypted data is transferred to the sensor's template library software, which converts and compresses the encrypted, raw image to a template with a size of approximately 1KB. Then the final template is encrypted again.

-Stacy Collett

biometrics

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Security Directions: A Virtual Conference

Security Directions Available On Demand Sept. 30 - Dec. 30

Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.

» Register Now

WEBCAST
Protecting PII: How to Work with IT to Manage Risk

Compuware Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.

» View this Webcast

Featured Sponsors