Biometric perils and patches

Biometrics authentication offers many advantages over conventional authentication systems that rely on possessions or special knowledge. With conventional technology, often the mere possession of an employee ID card is proof of ID, while a password potentially can be used by large groups of colleagu...

Full description

Saved in:
Bibliographic Details
Published in:Pattern recognition 2002-12, Vol.35 (12), p.2727-2738
Main Authors: Bolle, Ruud M., Connell, Jonathan H., Ratha, Nalini K.
Format: Article
Language:English
Subjects:
Biometrics
Cancellable biometrics
Data hiding
Fingerprint
Secure authentication
Threat model
WSQ compression
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Biometrics authentication offers many advantages over conventional authentication systems that rely on possessions or special knowledge. With conventional technology, often the mere possession of an employee ID card is proof of ID, while a password potentially can be used by large groups of colleagues for long times without change. The fact that biometrics authentication is non-repudiable (hard to refute) and, yet, convenient, is among its most important advantages. Biometrics systems, however, suffer from some inherent biometrics-specific security threats. These threats are mainly related to the use of digital signals and the need for additional input devices, though we also discuss brute-force attacks of biometrics systems. There are also problems common to any pattern recognition system. These include “wolves” and “lambs”, and a new group we call “chameleons”. An additional issue with the use of biometrics is the invasion of privacy because the user has to enroll with an image of a body part. We discuss these issues and suggest some methods for mitigating their impact.
ISSN:0031-3203
1873-5142
DOI:10.1016/S0031-3203(01)00247-3