As an outsource security partner BAI provides managed security, managed firewall, managed ids, content filtering, internet security, network security, penetration testing, and vulnerability testing.

Identity theft, typically involves stealing a person’s credit card and or PIN, one’s social security number, or some other identity card. Its one of America’s fastest growing reported crimes. Almost ninety thousand people reported such events to the FTC in 2001, a trend growing by 30% per year. Fraudulent accounts and checks have doubled in the last two years, per American Bankers Association. Typical check fraud losses involve forged signatures or counterfeit checks More than $2 billion worth of check fraud was attempted last year, another 30% increase since 2000. The General Accounting Office report estimates that more than one million Americans were victims of identity theft last year. Credit card fraud has more than doubled in the last two years.

When you use your credit card in a store, they may spot-check your signature on the back of the card. When cashing a check and you’re not in your bank, a picture identity card is required, but with modern technology, it’s not that difficult to forge such cards. Are additional means needed to identify people? So what is the cost of better security versus the current cost of insufficient security?

What is “Biometrics?”

Biometrics is the science of measuring physical things that verify a person’s identity. This includes: fingerprint, retinal and iris scanning, hand geometry, voice patterns, facial recognition are the main techniques. In a world where passwords should be seen as obsolete, biometrics is a much stronger proof of identity.

Biometrics like all other high technology products evolved substantially in the last three years. The International Association for Pattern Recognition (IAPR) has been around since 1978 with the mission to promote international co-operation, to stimulate interest in research, development, and the application of pattern recognition in human activity, and to disseminate and exchange of information on pattern recognition. The IAPR, the Audio- and Video-Based Biometric Person Authentication Association (AVBPA) and the US Government sponsor annual bake-off like tests of performance and reliability of biometrics products and components. The government FERET program introduced evaluations in face recognition and advanced face recognition. This helped propel biometrics from an infancy stage of prototype systems such that by the year 2000, face and fingerprint recognition technology matured into commercial systems. Annually fingerprint, image and motion video facial recognition systems etc. have been tested for performance, response time, and for security holes (that would allow spoofing of validation results). Image recognition technology now allows over 15,000 still images to be compared per second, an increase in performance of 200% in the last two years. Failure rates in fingerprint recognition are, for some vendors, close to a tenth of a percent. However not all fingerprint technology manufacturers have such low failure rates. The methods, metrics, and other such information are available upon request.

In the USA, Fellowes Inc.’s “Secure Touch Optical Mouse” incorporates Authentec’s bio-reader that reads down to your third skin layer. This yields a first capture acceptance rate of over 99%. This mouse contains three programmable buttons and can be configured to remember 15 passwords of various access sequences.

In Healthcare

HIPPA regulations were created to improve portability of patient information and ensure privacy and security. Biometric authentication before access to medical records is not a specific HIPPA requirement, but it enhances medical and insurance providers’ ability to prove compliance. Biometric authentication for access to patient records is becoming more prevalent, but most vendor products have proprietary APIs, and their performance and reliability is not publicly validated.

In financial markets

The Gramm-Leach-Bailey Act of 1999 protects information financial institutions collect about investments and customer decisions. Again biometrics is not required for compliance, but will play a supporting role as this law is more strongly enforced by the government. For banks, Credit Unions, and in public places, ATM machines will be offering new financial services, such as check cashing for those with and without bank accounts. The role of credit service providers could become blurred in a battle of market share, where biometric security will play a value-added role.

General Use

For time and or attendance reporting fingerprint recognition is the secure and accurate alternative to card-punching systems and time clocks. It reduces fraudulent employee time loss. Biometric readers will be integrated into factory machines, for more accurate usage reporting, and integrated with accounting and payroll.

The Government

Our Government is a major market for biometric products. The Patriot Act of October 2001, and Federal Home Security programs are examples of legislators proposing new laws, task forces etc., faster than they can print money to pay for them. Biometrics will play an expanding role in passenger identification at airports and in public places.

Biometric solutions have dropped in price. Fingerprint, facial geometry, video image, and voice solution prices are more than 50% lower than two years ago. Fingerprint authentication for computer access is $150; single door access systems are less than $900 (example: data center physical access). Still, many vendors do not publicize APIs or comply with the ANSI standard API; so security project planning should be done with care. For more information on applying biometrics, or discuss a specific security need, please let us know by reply email or contact BAI-Security directly 630-579-8870.

Roy Kopeikin RoyKopeikin@wideopenwest.com has 15 years experience in security and project management involving the Internet, IT Systems and Wireless & Data Networks. Copyright – 2003 Roy Kopeikin