Biometrics Security News and Information

Protecting Your Valuables At The Bank

Fortifying Banks

In today’s economic climate, banks have surely come into the limelight, both with the Federal Government Bailouts and their sheer reluctance to lend credit and money to small businesses. Well, today, they are making the news, but this time from a different perspective. It is coming from the standpoint of increased Security for their safe deposit boxes.

A major Security/Biometrics Vendor, known as "Diebold" has come out with a new Security Product called the "Electronic Vault Attendant Elite", or "EVA" for short. Here are the details: "EVA Elite is a comprehensive, self-service solution utilizing identity management, biometrics and access control to offer secure customer access to safe deposit boxes, while eliminating the necessity of a vault attendant. Its dual controls include both physical access control to grant entry to the vault's daygate, as well as the use of both an electronic and physical key to enable safe deposit box owners to gain access to only their assigned boxes." (SOURCE: http://www.findbiometrics.com/industry-news/i/7185/).

Final Thoughts On Today’s Posting

This Security Product does possess a number of key advantages. First, it does free up the Customer Service Representatives (CSR) at the bank, and as a result, they can spend more time with customers, and selling other Financial Products and Services (but, what about making loans?!?!?!?!). I guess this is perhaps why my Financial Institution stopped offering Safe Deposit Box Services when they moved. I used to have a Safe Deposit Box, and a lot of time would be spent by the CSR to let the customer into the vault, wait for them to get done, then sign them out. Apparently, with this new Security Product, the customer can gain entrance by themselves to the Safe Deposit Box Vault, and conduct their own business.

Second, multiple types of Biometric Technologies can be used with this Security Product. For example, this includes Hand Geometry Recognition, Fingerprint Recognition, Signature Recognition, and the usual Smart Card procedures. As a result, Security Solutions can be customized and developed to the Financial Institution’s exact Security needs.

Third, this Security Product also implements a Multi Modal Security Solution. While this in of itself is not unique, the techniques utilized are unique. It uses both Physical Electronic Security measures, all in one package. There is Security for both the door of the Safe Deposit Box Vault, as well as for the customer’s own Safe Deposit Box. For example, "Security is enhanced with the EVA Elite solution because dual control mitigates risk of both internal and external fraud by incorporating both electronic and physical access control. No other solution on the market combines daygate access control with electronic key access to the safe deposit box and a physical key managed by the customer." (SOURCE: http://www.findbiometrics.com/industry-news/i/7185/).

Fourth, there are Auditing Features also implemented into this Security Product which allows the Security Administrator to examine certain trends in usage and activity, and to discern if a customer is abusing their access privileges.

Source for this Posting: http://www.findbiometrics.com/industry-news/i/7185/

Fingerprints From Bullets

Extrapolating Fingerprints

I have written a couple of Postings in the past about "Latent Fingerprints", which basically involves trying to reconstruct the images of Fingerprints, left after a crime scene. Well, there have been some more advances made, and this time it is happening in the United Kingdom.

Scientists at the University of Leicester and the Northhapmtonshire Police Department have developed a method of trying to reconstruct, or "visualizing", or extrapolating the image of a Fingerprint, after it has been attempted to be wiped away at. This new technique examines when the Fingerprint touches a metal surface, and the sweat that is involved in this interaction.

Here are the details into this new technique: "The technique involves studying the chemical and physical interactions occurring between the metal and the fingerprint sweat deposit. Using advanced surface imaging techniques, such as an atomic force microscope, nanoscale observations of fingerprinted brass samples can identify optimum conditions to promote the natural enhancement of the fingerprint, vastly improving their recovery rate. It has also proven that components of the sweat deposit survive washing and wiping of the surface." (SOURCE: http://www.sciencedaily.com/releases/2009/07/090713085018.htm).

Final Thoughts On Today’s Posting

When trying to reconstruct Fingerprints Images in the past, various types of powders have been used, which can degrade whatever image is left of the Fingerprint at the crime scene. This new technique utilizes natural mechanisms instead , such as the increased level of temperature and humidity after the Fingerprint has interacted with the metal surface, and the resulting residue which remains after this interaction has occurred. Thus, there is no intentional degradation or impact from the external environment, except in the cases of unforeseen circumstances.

It was also stated in the article from which I got this story from that the chances of trying to reconstruct Fingerprint Images is often extremely remote (it is claimed to be less than one percent in the case when bullets are used). Although this new technique mentioned in this Posting could help increase that success percentage only by a very small amount on an absolute scale, comparatively speaking, it could still mean a huge breakthrough, especially with crime scene investigations.

It is good to see that there are efforts in Research and Development geared towards these kinds of applications which are so critical, especially in crime scene investigations and forensics. In today’s times, when funding is so scarce, it is these types of applications which should receive top priority, rather than wasting time exploring what I have termed, the "exotic Biometric Technologies of the Future", in which the probability of public acceptance is extremely remote.

Finally, I wonder if this same technique described in this Posting can also be tested on other surfaces, such as plastics, tile, ceramics, etc., rather than just from bullet surfaces.

Source for this Posting: http://www.sciencedaily.com/releases/2009/07/090713085018.htm

Metabolism As A Means of Verification And Identification???

The Way We Process Food As A Biometric

We are all very familiar with eating food, as we need it to survive. Some of us may eat really healthy foods, and some of us may eat really pitiful, or junk food. But regardless of what we eat, the food is digested and provides fuel for the body, and is eventually burned.

The burn rate of food, or caloric expenditure, varies greatly among individuals. Some of us can burn through very calories very quickly, and some of us hold onto calories for a much longer period of time, which can result in weight gain. This all leads to a process called "Metabolism". Specifically, it can be defined as " . . . the set of chemical reactions that occur in living organisms to maintain life. These processes allow organisms to grow and reproduce, maintain their structures, and respond to their environments." (SOURCE: http://en.wikipedia.org/wiki/Metabolism).

Well, now scientists have possibly discovered that the unique patterns in Metabolism, very similar to the unique patterns in a Fingerprint, could prove to be a way to Verify and/or Identify individuals. And it is in this context, it could be considered, although very remotely, a potential Biometric of the Future. For example, "  . . . [the unique patterns] . . . can be detected by analyzing the chemical whorls and grooves that result from metabolism . ." (SOURCE: http://www.sciencedaily.com/releases/2009/07/090722110859.htm).  Even more interesting, is that these unique patterns in the Rate of Metabolism, or the "Metabolic Profile", can be detected in the urine of the individual.

Final Thoughts On Today’s Posting

The results so far seem to show that this could be a way to at least Identify various individuals. For instance, " . . . based on the analysis of over 1,800 urine samples from people monitored for 2-3 years . . . Researchers could identify individual patients from their metabolic profiles with an accuracy of over 99 percent." (SOURCE: http://www.sciencedaily.com/releases/2009/07/090722110859.htm).

The reason why I say this is a potential Biometric is from the standpoint it has a remote potential for Verification and/or Identification, as the above quote has stated. But however, it has a very, very long time until it can even be considered for the mainstream use, just like DNA Recognition. What takes years of study has to come down into a matter of seconds, at minimum.

However, this has a much greater potential for Medical Applications. It is hoped that this type of analysis of the Rate of Metabolism can lead to the early prognosis of various of types of diseases, greater personalization in the types of medication given to patients, etc.

Source for this Posting: http://www.sciencedaily.com/releases/2009/07/090722110859.htm

A More Secure American Workforce

Background Checks Need To Be Improved

Remember a long time ago, when we graduated from College or Graduate School, interviewing was supposed to be fun and exciting, and at most, the background check which would be conducted on us was just a mere phone call to our references whom we provided to our potential employer.

Well, these days, given the Global Recession and extremely tight job market, background checks have become much more extensive and exhaustive. For example, if we don’t have a god credit score, the chances of getting a job offer become even slimmer. Because of this intense process, new systems of conducting background checks have evolved and automated.

Well of these more automated background check processes is called "E-Verify", and an organization known as the "Migration Policy Institute", or "MPI" for short, just came out with a report and presented it to the Department of Homeland Security (DHS) for recommendations on how this electronic method of conducting background checks can be greatly improved.

This report is entitled "The Next Generation of E-Verify: Getting Employment Verification Right", and focuses upon the system’s greatest Security Risk: Identity Theft (ID Theft). For example, according to one of the author’s of this report: "the system most crucially still cannot detect identity fraud. And E-Verify requires enhanced due-process protections, compliance and auditing for misuse and identity fraud, stronger employer oversight and real enforcement of worker protections." (SOURCE: http://www.findbiometrics.com/articles/i/7174/).

Final Thoughts On Today’s Posting

There is much talk now about creating and implementing a newer and much more Security enhanced version of E-Verify, which would greatly curtail the risk of ID Theft. At present, it appears that the present version of E-Verify uses individuals to process paperwork and the electronic transactions which occur between the E-Verify System and the potential employee, and as a result, confidential data and information can easily be stolen.

Thus, the newer version of E-Verify would include Security measures which would reduce the amount of "guesswork" in Verifying and/or Identifying potential employees. However, before the newer version of the E-Verify System is created and fully implemented, it was recommended that pilot projects be launched first utilizing three different Security approaches:

1)  Using Secure Documents (although generally stated, this could prove to be a viable method);

2)  Using PIN Numbers (in my opinion, the worst of form of Security, as PIN’s suffer from the same flaws and weaknesses as do Passwords);

3)  Using Biometrics (when compared to #1 and #2, this is the most viable option).

The detailed report is available at:

http://www.migrationpolicy.org/pubs/Verification_paper-071709.pdf

Given this Global Recession, it appears that another emerging Market Application for Biometrics is forthcoming: securing the American Workforce via highly scrutinized background checks. While this is good news for the Biometrics World, could this ultimately be construed as a violation of out Privacy Rights???

Only time will tell.

Source for this Posting: http://www.findbiometrics.com/articles/i/7174/

The Ease of Use Variable In Biometric Systems

A Newer Single Sign On Solution

I have written about this Biometrics/Security Vendor in the past, "AuthenTec". They dominate the Biometrics Market with their Fingerprint Sensor Technology. Well, they have just announced the launch of a new type of Fingerprint Software, called "TrueSuite", and is geared primarily as a Single Sign Solution (for those systems which utilize their Fingerprint Sensors) for the Consumer PC Market, and the "Netbook".

This Fingerprint Software is compatible to a wide range of Operating Systems and Web Browsers, focusing upon Windows:

1)  The upcoming Windows 7 Operating System, which supports the Windows Biometric Framework (also known as "WBF");

2)  Windows Vista;

3)  Windows XP (with both Service Pack 2 and Service Pack 3);

4)  Internet Explorer (Version 6, Version 7, and Version 8);

5)  Firefox

Final Thoughts On Today’s Posting

Based upon what I have read, it seems that this new Fingerprint Software is really geared towards the average, everyday consumer, whom simply wants an extra layer of Security at a very reasonable price and which is very easy to deploy and use.

Here are some of the key advantages of this Fingerprint Software: "TrueSuite simplifies the fingerprint enrollment process, enables Windows and Web site logon as well as user management of logons and passwords. TrueSuite also allows PC users to lock and unlock screensavers, files, and folders, and user screens can be easily personalized with a wide range of colors and themes. TrueSuite user settings and identities can be easily and securely exported to other PCs. Embedded video and user help screens offer simple guidance to improve the user experience." (SOURCE: http://www.findbiometrics.com/industry-news/i/7171/).

I have written many, many times in the past about the importance of the Ease of Use for the consumer in Biometric Devices. However, all of these Postings which dealt with this issue have been from the standpoint of the overall system and hardware being implemented. However, equally important in this equation is the software which is being used to drive the Biometric System. What I am trying to say is that what is the point of having an extremely easy to use Biometric System, when the software to be used is extremely complicated???

The Ease of Use variable has to be taken into all sorts of considerations when implementing a Biometric System.

Source for this Posting:  http://www.findbiometrics.com/industry-news/i/7171/

A New Kind Of "Biometric Card"

A Strategic Partnership Announced Between A US Vendor And A Norwegian Vendor

A United States based Biometrics/Security Vendor known as "Validus Technologies Corporation" and a Norwegian based Biometrics/Security Vendor known as "IDEX ASA" have just announced a strategic partnership between the two. The former creates and implements Biometric Cards, and the latter creates and implements various technologies associated with Fingerprint Sensors.

Here are some of the details behind this new, strategic partnership: "Validus designs, manufactures and offers a strong authentication solution that combines OTP (One Time Password) and fingerprint biometrics within the convenience of a card form factor. When the registered user swipes a finger over the VALIDcard’s embedded fingerprint sensor an OTP is generated and displayed on the card. The OTP and can also be transmitted by contact and contact-less Smart Card technologies, among other radio frequency technologies . . . . . Incorporation of IDEX’s SmartFinger technology into Validus’ new generation of VALIDcard™, will become an interoperable platform with most all infrastructure and identity verification applications worldwide." (SOURCE: http://www.findbiometrics.com/industry-news/i/7173/).

Final Thoughts On Today’s Posting

The following are the anticipated Market Applications as a result of this new partnership, and the formulation of the new security technology:

1)  The National ID Card;

2)  The Finance Sector;

3)  Physical Access Entry;

4)  Computer/Network Security;

5)  Various branches of the Military

I take particular interest in #1. As the rush for the National ID Card will proliferate over time, along with the e-Passport (to me, it seems like that the demand and implementation for the e-Passport is growing much more quickly) it will be interesting to see if more strategic partnerships such as the one described in this Posting will evolve, in order to provide, for the lack of a better term, "better Biometric Technology".

In all of the Postings I have written so far about the National ID Card, there has been only one Biometrics/Security Vendor providing the technology. This is the first time, I have seen a strategic partnership created to better service the National ID Card needs amongst various Countries.

Let’s see how this potential trend evolves over time . . . .

Source for this Posting: http://www.findbiometrics.com/industry-news/i/7173/

The Private Sector Being The Dominant Player

Protecting Patient Data And Information

A major Biometrics/Security Vendor known as "Digital Persona, Inc." has just recently announced that a major healthcare organization in Ohio has selected its Fingerprint Product Line as the primary source for a Single Sign On Solution (also known as an "SSO"). The healthcare organization is known as "The Nord Center", and the SSO order they placed is huge.

Here are the details: " . . . The Nord Center, Ohio's second largest comprehensive behavioral healthcare services provider, has chosen the company's DigitalPersona Pro fingerprint identity solution, and U.are.U 4500 fingerprint readers to secure access to patient records on organization computers. The Nord Center operates a comprehensive behavioral healthcare center which serves over 7,500 clients and answers 18,000 calls each year. Operating the agency's emergency crisis line requires fast access to client data." (SOURCE: http://www.findbiometrics.com/industry-news/i/7166/).

Final Thoughts On Today’s Posting

Some of the major reasons cited for acquiring this SSO include:

1)  Coming into compliance with the HIPAA Legislations and Mandates;

2)  The SSO’s integration function with Active Directory (this is a tool in the Windows OS which manages Usernames and Passwords and the Security Policies associated with them for a place of business or organization);

3)  The need to access quickly and efficiently Patient Data and Information without having to remember multiple passwords in a time of crisis. For example, " . . . DigitalPersona's fingerprint biometric solutions enable our ESS staff to quickly and securely obtain access to patient records, leading to faster response time which could mean the difference between life and death." (SOURCE: http://www.findbiometrics.com/industry-news/i/7166/).

I have written many times before about my concerns about the Federal Government being the biggest customer and market driver for Biometric Security Solutions. It is really refreshing to see Private Sector needs being primary market drivers for the acquisition of Biometric Solutions, as exemplified in #’s 2 and 3.

Source for this Posting: http://www.findbiometrics.com/industry-news/i/7166/

The Biometric Database-A Critical Component

A Newer And Bolder Kind of Database

When a single Biometric Device is installed at a Point of Entry for Physical Access Entry, or a Computer Workstation as a Single Sign On Solution, this is considered to be what is known as "Standalone Mode". The Biometric Device is self contained, with its own internal processor and database to contain the Biometric Templates.

However, when multiple Biometric Devices are linked together, they are often connected to a central server, which contains the database for containing and processing the Biometric Templates. So as you can see, in this type of scenario, Biometric Databases are very important. In the networking world, this is known as a "Client Server Topology".

Well, a Biometrics/Security Vendor known as "Suspect Detection Systems Inc." has just announced a new kind of Biometric Database, called the "Cogito Data Center" or "Cogito DC" for short.

Here are the details of it: "Cogito DC will enable SDS customers to create a central storage base of all examinee data. The interrogation system collects a vast amount of data with each examination beginning with a scan of the examinees passport or identification card. The system then scans unique biometric identification information including fingerprint and iris (eye) imaging, and voice signature . . . the Cogito DC knowledgebase then aggregates and analyzes the interrogation results of all examinees. The system compares test results of potential suspects from common backgrounds, which then enables interrogators to perform intelligence analysis over the entire scope of collected metadata." (SOURCE: http://www.findbiometrics.com/industry-news/i/7149/).

Final Thoughts On Today’s Posting

I have seen a lot of Biometrics Products and Devices in my time, and a lot of them have utilized this Client-Server approach. However, a lot of them are just "canned" versions of a Biometric Database, meaning they have very limited functionality and processing capabilities. In other words, they cannot process, manipulate, and query complex Biometric Transactions if needed. If a customer needs extra functionality added, they often to develop the Database Code on their own, at an even greater cost.

This is the first time I have seen a Biometrics Database that can do so much processing in real time for the Customer. Obviously all, components which make up a Biometric System are very important, everything from the cabling to the Biometric Devices to the Biometric Database.

After all, this is the component which contains the Enrollment and Verification Templates, and allows Biometric Transactions to take place, especially the Verification and/or Identification of the individual. The Biometric Database needs to be robust for quick Processing and Transaction times, and must also be very secure.

Source for this Posting:  http://www.findbiometrics.com/industry-news/i/7149/

The Nationalization Of Biometrics???

Results Of A New Analysis

A Market Analysis Survey conducted by Frost and Sullivan has revealed that the Federal Government continues to be the biggest customer for Biometrics Solutions and Biometrics Products. For example, this study found that revenues for Biometrics was valued at $2.6+ billion, back in 2007, and this is expected to surpass $9+ Billion by the year 2014.

In other words, "The regulatory-driven activities and initiatives of the government have enabled the North American government biometrics market to become a high revenue generator." (SOURCE: http://www.findbiometrics.com/articles/i/7146/).

The biggest drivers from the Federal Government for Biometrics is expected to be in the following key Market Applications:

1)  The Transportation Infrastructure;

2)  Border Protection/Surveillance/Control;

3)  Immigration Centers at Points of Entry and Exit in the United States, especially Airports;

4)  The National ID Card;

5)  Enhanced Security for Driver’s Licenses;

6)  Physical Access Entry and Single Sign Solutions

Final Thoughts On Today’s Posting

Also, it was revealed that Fingerprint Biometrics demand remains just as strong as ever, especially for Physical Access Entry Applications and Single Sign On Solutions. However, it is expected that as other Biometric Technologies come out as dominant players this year, a "dynamic shift" in the Biometrics World, especially with the emergence of Facial Recognition and Iris Recognition.

Despite these optimistic outcomes, it was also discovered that there are a number of obstacles curtailing the further growth and demand of Biometrics. Some of these major obstacles include:

1)  A lack Best Standards and Best Practices for Biometrics;

2)  Lack of Consumer Awareness of Biometrics;

3)  Extraordinary long sales cycles (this could be triggered by the Global Recession).

As I have written in the past, it’s good to see the rosy, expected growth for Biometrics, but remember, right now it is one sided, with the Federal Government being the biggest customer. So far, I have seen very little activity with regards to the Private Sector being big customers of Biometrics as well.

I think the healthiest outlook would be a balance between the Federal Government and the Private Sector eating out the biggest chunks of the "Biometrics Market Pie." But, the Global Recession is preventing from this happening.

I just hope that this trend does not lead to a nationalization of the Biometrics World as we are seeing at the present time with the Financial World.

Source for this Posting:  http://www.findbiometrics.com/articles/i/7146/

Ease Of Use Vs. Effectiveness

A New Biometric Product

A Biometrics/Security Vendor known as "L-1 Identity Solutions" (I have written about them before in previous Postings) has just launched a new Biometrics Product called "Agile TP". This Product is meant for high level and high capacity Verification and/or Identification of individuals at various Physical Access Entry as well as Airport and Border Control Checkpoints. It can also be used for doing background checks on individuals as well.

What is unique about this Product is that it can capture a complete set of Fingerprints (by this, I am assuming all 10 Fingerprints) in just under 10 seconds. Here are some more technical details: "Compact and portable, the Agile TP is easy to install and launch and is powered by a standard USB-2.0 interface. Advanced technologies enable the capture of more and better fingerprint data, such as fine minutiae and ridge detail in all fingerprint types, thereby reducing variability and the need for recaptures which lead to processing delays. The Agile TP weighs less than five pounds and has a large platen size of 3.2 inches x 3 inches . . ." (SOURCE: http://www.findbiometrics.com/industry-news/i/7143/.

There is also a confirmed Security Contract with a Latin American Country for this Product.

Final Thoughts On Today’s Posting

In the one year I have been writing Postings about Biometrics, the one common theme I have always harped on the most is the importance of educating the End User whether it is about Biometrics in general or in learning how to use a specific Biometrics Product.

Well, what really struck me as I read the review for this Product is that it is designed to have very minimal training required by the End User, but still be very powerful enough to serve high level Biometrics Applications and Security Needs. For example, "Civil identification systems must be simple to use and require no level of technical proficiency on the part of the user. At the same time, the system must be technically sophisticated to process high volumes of people rapidly and accurately, without causing delays or inconveniences. The innovative Agile TP user interface enables untrained individuals to use the system with ease, assisting with proper finger placement and improving processing times." (SOURCE: http://www.findbiometrics.com/industry-news/i/7143/).

This is the first time I have seen a Biometrics Product distinctly trying to maintain such a fine line. However, I will still stick to my original hypothesis: No matter how easy the Biometrics Product is to use, there still needs to be some sort of minimal, formal training for the End User in order for them to effectively utilize the Biometrics Product. In the end, Ease Of Use and Effectiveness Of Use are two different themes and processes.

Source for this Posting: http://www.findbiometrics.com/industry-news/i/7143/