Biometrics is a set of methods related to unique identification of people based on physiological or behavioural traits

learn more… | top users | synonyms

18
votes
12answers
2k views

Why do we even use passwords / passphrases next to biometrics?

In the last couple of days there were a lot of talking about passwords and passphrases, not only here, but on several blogs and forums I follow (especially after XKCD #936 saw the light of this ...
15
votes
4answers
800 views

Biometric versus other Two Factor Authentication Mechanisms

Over the years biometrics is the go-to movie authentication mechanism, but in the real world I'm getting conflicting opinions about it. Everything I've learned shows that biometrics are flawed ...
10
votes
5answers
628 views

Non-OEM Biometric Software?

Most of us with fingerprint readers and such devices probably use the software provided by the vendor, to enable biometric OS login or single sign-on functionality. However, I've recently wondered if ...
8
votes
3answers
1k views

iPhone 5S security: Given someone's fingerprint can I use a 3D printer to create a fake finger with a real fingerprint on it?

With such a big deal being made about the iPhone 5S's fingerprint reader (and formerly the Thinkpads' fingerprint readers) I really wonder how secure it is to use fingerprints in lieu of passwords. ...
7
votes
3answers
3k views

How secure is Android's facial recognition?

Android supports using facial recognition for unlocking your phone. How secure is that mechanism? For instance, if someone has a good quality picture of your face, can they defeat the facial ...
5
votes
1answer
1k views

False negative in biometrics

In biometric systems preventing false positive is usually far more important than preventing false negatives. In what situations can false negatives be more serious than false positives?
5
votes
2answers
255 views

Is iPhone's fingerprint signature a one-way hash?

I've been considering the security of the iPhone 5S fingerprint feature. My main concern is, not that someone could replicate my fingerprint in the physical world and bypass the phone, however that ...
5
votes
1answer
85 views

What happens if biometric data is stolen?

As we move toward a future where fingerprints might possibly replace passwords, I see one issue. While passwords can be stolen, they can be changed by the owner after being notified of the security ...
5
votes
1answer
280 views

What are formal parameters for fingerprint scanner selection?

I would like to buy a USB fingerprint scanner. I intend to use it to log in into my Windows computer, to secure RoboForm password manager, and generally to replace password entry with a quick finger ...
4
votes
4answers
243 views

Biometric non revocable major flaw

The major problem with biometric methods of identification is that they are impossible to revoke. Once my fingerprint, under whichever form, is stolen, I can't put it on a worldwide revocation list, ...
4
votes
2answers
240 views

Is it possible to reliably derive a key from a biometric fingerprint?

Many products (e.g. notebooks, security doors and now smartphones) support some form of fingerprint authentication. That seems simple enough: A trusted system compares a stored representation of a ...
4
votes
2answers
3k views

Are fingerprint scanners easy to bypass?

Thinking about adding a fingerprint based authentication layer, but then I recalled the MythBusters beat fingerprint security system episode -- is this a common issue, and if not, how do you tell if a ...
4
votes
1answer
188 views

Web-browser based biometrics?

Is there any practice of using biometric mechanisms online - for example, for visual identification via webcam to identify audio-visually the person speaking, or, performing biometric analysis on ...
3
votes
2answers
302 views

Is there any way to cryptographically hash a human thumbprint?

Is there any way to cryptographically hash a human thumbprint into a form that can be consistently reproduced by thumbprint readers? Assuming that it would be possible to create a database of ...
3
votes
2answers
109 views

Is there a standard, storage algorithm or protocol for fingerprints?

What are the generic conventions and standards for storing and identifying biometric fingerprints out there? Are there some RFC documents for that? As a sub-question: suppose I want to preserve my ...
2
votes
7answers
508 views

Biometric authentication in the real world

can anyone give a realistic estimation, based on real-world experience, of how much biometric authentication techniques are being used in the IT field?
2
votes
3answers
168 views

How important is user acceptance when deciding whether to deploy biometric authentication?

I've been browsing through several studies on user acceptance of biometrics, and I've been noticing that they all focus on attitudes and beliefs about biometrics. While it's important to know a ...
2
votes
1answer
2k views

How does Activesync security policy affect the usage of the iOS fingerprint scanner?

An Activesync IT administrator has the ability to choose if the phone should require a password, and also how complex it should be. Since the fingerprint scanner appears to replace the traditional ...
1
vote
2answers
132 views

Can a biometric device serve as a user based entropy source?

I am wondering if a biometric device can be used to generate some entropy or key material that would be stable across each authentication. The contrary would be for biometric devices to act like an ...
0
votes
1answer
111 views

Performance of biometric authentication on cell phones as of 2014?

How well do the various biometric authentication methods currently perform in regards to precision and recall? Can anyone cite a relevant research article?
0
votes
3answers
113 views

Isn't it less secure to use something you are for authentication?

I have to think of this everyday when I close the doors of the shop I work in, a year ago we used to close the shop and arm the alarm using a key fob this means the worst case scenario was that I get ...
0
votes
1answer
730 views

How to calculate combined false acceptance/rejection rates of multiple biometrics authentication systems?

I am a taking a network security class at grad school, and I need a little help with my assignment question. I am trying to think this through, and just want to know whether my approach is right or ...
0
votes
0answers
16 views

How to calculate FAR and FRR in pattern recognition?

I am working on a vein pattern recognition project based on SURF algorithm and euclidean distance. I have completed my program to find the maximum and minimum distance between vein features and find a ...
0
votes
0answers
257 views

Is there software available for two-factor, biometric authentication to the OS?

Many fingerprint readers and other biometric authentication devices come with software for single-factor authentication to the OS. Is there any third-party software (F/OSS or otherwise) available for ...