Online and Digital Identification, Securing Web 2.0, PKI and Digital Certificates

Questions raised about biometrics usability if data is hacked

Thursday, February 25, 2010

Various security and technology experts have voiced their opinions and worries regarding the potential flaws in adopting biometric systems for use with physical and logical access control systems or other uses where an individual’s authentication would be required, according to an S C Magazine article.

While many have raised concerns regarding the adoption of biometric systems dealing a number of privacy-related issues, these experts take a slightly different angle looking into how useful biometric technology is assuming a leak of data.


Guy Churchwood, CEO of IT infrastructure consultancy company LogLogic, first looks at biometrics in the form of logical access control comparing it to having one password that can never be changed. Further, Andrew Clarke, vice president and managing director of the Europe Middle East and Africa region for access control security company e-DMZ Security, looked specifically at fingerprint scanners citing them as inherently flawed due to their visual-based authentication leaving them very open to fraud. Clarke adds that not only are the systems open to fraud, but that obtaining an individual’s fingerprint sample is also very simple. A third expert, CTO of authentication technology developer Imprivata David Ting, went on to elaborate further speaking to flaws dependent on where and how the password data is stored and matched.

All three experts, however, agree with having multiple factors of authentication, such as biometrics and a password. While each of them acknowledges that a leak of biometric data would still constitute potentially damaging and irreversible data being in the hands of someone it should not be, utilizing a second form of authentication on systems would significantly reduce the usefulness of such stolen data to a fraudster or criminal.

Read the full story here[end] 

AVISIAN Publishing is pleased to announce the release of the interactive version of the fall 2011 issue of CR80News.

The interactive feature allows for a miniature mode that you can thumb through as well as a full screen mode that allows you to read the magazine as if it were sitting in front of you. Even flipping the pages looks great with this new feature.

read more »

ValidSoft partnered with Opus Research and released a report titled “Voice Biometrics Authentication Best Practices: Overcoming Obstacles to Adoption” that predicts the technology will be deployed in payment authentication assuming the best practices it lays out are followed.

read more »

Multicard, a unit of Identive Group that supplies credential, identity management and system integration services, has signed a contract with global consumer products company Henkel to provide a global multi-function identity credential service card to Henkel employees.

read more »

AVISIAN Publishing is pleased to announce the release of the interactive version of the winter 2011 issue of Regarding ID.

The interactive feature enables a miniature mode that you can thumb through as well as a full screen mode that allows you to read the magazine as if it were on the desk in front of you.

read more »

Precise Biometrics has developed a new line of “smart cases” for brands of tablets and smart phones to be released in 2012 and 2013. The new smart cases have built-in card reader and fingerprint sensor enabling users to both secure their devices as well as replace various password-based security for protected online sites and applications.

read more »

HP partnered with Anakam to offer a cloud-based system for identity vetting and credentials. Bryan Maybee, a solutions architect at HP, says the system can be used by the public or private sector for registering individuals to online services.

read more »