The basics of biometrics

Although hand readers and fingerprint readers are employed in about 80 percent of biometric access applications, any of those modes can verify your identity.They differ, however, in many characteristics, including:Each mode ' and, in some cases, each product ' differs greatly in approach and installation, so direct comparison is difficult during a typical bid process. Moreover, each mode involves some trade-offs. For instance, iris identification is accurate but can be slow and requires more cooperation from users than some other types of biometrics.There are a number of other major issues to consider in selecting the best biometric mode.First and foremost, don't let a biometric solution lull you into a false sense of security. Don't abandon your firewalls, encryption, passwords and other security precautions just because you have biometrics. The measurements for comparison reside in a database, which must be encrypted and subject to security. 'Always save the raw data of each measurement,' said Chris Crooks, an associate at Booz Allen Hamilton. As capacity for detail improves, you'll find uses for it, and keeping that data in a standard format makes data sharing across agencies possible.You may want to avoid large, centralized databases of biometric information. Self-contained, individual fingerprint readers, for example, can verify identity and keep the biometric data out of the centralized database. Users also feel more comfortable knowing that their fingerprints aren't in some massive repository. But losing a reader can be expensive and annoying.And bear in mind that biometric technologies have limitations. Some portion of the population will always be physiologically unable to use certain modes. It's not just that one-armed man, either: Approximately 4 percent of people can't use fingerprint technology because of dry skin.Psychological and political issues are no less important. 'Most Europeans ' and many Americans ' are unwilling to entrust their fingerprints,' Crooks said. Others are squeamish about exposing their eyes to scanners, no matter how harmless they are. Even the chance of infection from a fingerprint scanner is objectionable to some people.Biometric systems can also be costly and complicated to deploy. That makes it all the more important to work carefully with vendors. 'Focus on the overall solution, not just the product or even the specific technology,' Berger said. 'Stretch your goals. Ask for a lot from vendors: ideas and possibilities, not just products.'Don't forget about scalability. Depending on the intent of the biometric implementation, the number of people using it will probably grow, sometimes rapidly. For example, biometric-controlled access may be mandatory first for one group working on a network, then for another and another until all users must be enrolled. Your biometric solution should be scalable to handle increases in users and locations.Finally, although standards for biometrics are just emerging, you should ensure that your solutions are based on existing standards and not dependent on a vendor's proprietary technology. For one thing, using standards-based components permits a wider range of possible solutions and vendors for each component.Furthermore, standards-based technology lets you upgrade more easily when newer, better, faster widgets come along ' and they will. The field of biometrics is far from mature, and new modes and implementations come along each year. 'Fingerprints are already being replaced by other modes,' Zekster said. Try to select a vendor with a reputation for keeping up with evolving standards.When comparing solutions, you'll likely need to do some probing to get the information you need.Suppose you want to know how fast a prospective biometric solution can handle people waiting for access. The vendor may quote the verification time for the reader, which is the elapsed time from the user presenting themselves at the device until identity verification. This is certainly part of the total time you're looking for, but it's not the whole story. What you need is the total time it takes for a person to use the device.Depending on environmental conditions at your location, you may also need to look closely at each solution's durability. Does your environment include abrasive sand, electrostatic shock, high or low temperatures, direct sun or radiation, chemicals, rain or snow, wind-driven grit, or other difficult circumstances? If so, make sure the mode and its implementation match the need.Biometric solutions must also integrate with existing systems. Products that are interoperable will have a longer useful life and greater flexibility. Choose solutions that are independent of operating system and hardware. The ability to acquire hardware from one vendor and software from another can be crucial for creating best-of-breed solutions.If you need to do special application development, a software development kit can simplify things. You may also require remote enrollment or management capabilities for facilities in multiple locations.Finally, be aware that the biometrics business is pretty wild these days. Companies merge or acquire one another and sometimes go out of business entirely. This has its advantages: One company may offer many technologies. But there are also potential downsides. For example, long-term product support may be unpredictable and unstable. Working collaboratively with knowledgeable and imaginative systems integrators is vital in a technology that is so complex.Biometrics is one technology where government agencies have the advantage over businesses.The government is by far the biggest customer for biometric security, so government agencies get to see the newest and best ideas first. 'Government agencies have a moral responsibility to pioneer and shape biometric solutions,' Berger said. Use this advantage to create a biometric solution that's perfect for your agency.XXXSPLITXXX-Implementing a biometric solution to secure access is a major project that will affect many aspects of your organization. Here are the questions you should consider before committing resources to a particular solution. XXXSPLITXXX-For more information on biometrics, check these Web sites: http://www.biometrics.dod.mil http://www.bioapi.org http://www.biometrics.org http://www.biometricscatalog.org http://www.fbi.gov/hq/cjisd/iafis.htm http://www.nationalbiometric.orgXXXSPLITXXX-