RSS
|
|||||||||||||||||||
  Six Biometric Devices Point The Finger At Security June 1, 1998 | |||||||||||||||||||
|
By David Willis with Mike Lee
However, you can get both security and convenience. With low-cost fingerprint-authentication devices, users can merely put down a digit and forget about passwords. No matter how scatterbrained a user might be, he or she simply can't forget his or her fingers.
Out of an ever-growing pack of low-cost readers, we tested American Biometric Corp. (ABC) BioMouse, Biometric Access Corp. (BAC) SecureTouch, Digital Persona U.are.U, Identix's SafeTouch II, National Registry Inc. (NRI) Secure Keyboard Scanner and Sony Fingerprint Identification Unit (FIU). We focused specifically on the devices themselves, because most are not complete systems--yet. Digital Persona's U.are.U proved to be the best device overall, though it suffers from limited software availability. It combines a very fast and flexible reader with a low false reject rate (see "Biometrics Under Our Thumb," on page 86). We couldn't break into systems protected by U.are.U through fake finger or lifted fingerprint techniques as we could with most of the other devices tested. U.are.U features the simplest installation by virtue of the Universal Serial Bus (USB) interface, which, unfortunately, also limits its deployment in the short run. If you need to deploy a fingerprint-recognition device now, then the best candidate for you is Sony FIU. Its reader is fast and highly secure, and it supports onboard template storage and encryption. Like U.are.U, the FIU supports one-hand operation, reading the fingerprint image without forcing the user to press a capture key. Tools or Toys All of these devices offer optical techniques that capture a fingerprint image, using a light source refracted through a prism. Yet there are many physical differences among these units. Those from BAC and Identix are heavy, bulky devices, with complicated optics onboard, while NRI's device uses a custom plastic lens. Sony FIU is relatively small and lightweight, with several custom lenses inside. ABC's product uses lightweight plastics, and Digital Persona's device uses a thin plastic that appears to have embedded microprisms. We also discovered manufacturers with alternative approaches to expensive optical devices. For example, Who? Vision Systems manufactures a product using a custom electro-optical polymer--a very thin, self-illuminating film--that replaces lenses. The cost to manufacturers per device is under $50. Another company, Veridicom, makes a silicon-based fingerprint sensor. Unfortunately, we were not able to get complete products from these vendors in time for testing. Only the Digital Persona and Sony devices could detect a fake finger attack by combining optical and proprietary finger-detection methods. ABC offers an enhancement for live finger recognition that uses infrared and pulse detection--for an additional cost. Without this add-on, ABC's BioMouse can be hacked with a fake finger built from an imprint of a user's finger--as can the BAC, Identix and NRI devices.
|
|
|
|
The Fingerprint-Authentication Device Features charts, in Acrobat format.
Biometrics Under Our Thumb The Software Battle Has Just Begun S/MIME And OpenPGP Vie For Security Title March 1, 1998 What Is A Virtual Private Network?, March 15, 1998 What To Look For In Dial-In Authentication March 15, 1998 RFP: Security Services April 1, 1998 Finjan SurfinGate: The Lifeguard Is On Duty April 15, 1998 PGP Grows Up April 15, 1998 Smartcards: The Intelligent Way To Security May 15, 1998 Kerberos and DCE November, 1997  Print This Page |
|||||||||||||||
 |
|||||||||||||||||||
our customizable newsletter, sends you security alerts, product updates and software patches on the products you use. Sign up now at 
To view the Report card.Best of the Web
Data deduplication: Declawing the clones
Data deduplication is emerging as a critically important new arrow in the storage administrator's quiver to answer hard questions about the increasing problem in storage growth costs.
Compression, Encryption, Deduplication, and Replication: Strange Bedfellows
One of the great ironies of storage technology is the inverse relationship between efficiency and security: Adding performance or reducing storage requirements almost always results in reducing the confidentiality, integrity, or availability of a system.
WAN Optimization Whitelists and Blacklists
Optimization is a fantastic way of saving money and creating really happy customers at the same time, but it doesn't work flawlessly for all applications.
WAN Optimization as a Managed Service: It's Not About the Cost
This insight examines how organizations outsourcing their WAN optimization initiatives to a third-party go about achieving their goals for application performance, reducing operational costs, and streamlining enterprise infrastructure.
