Securing the desktop:
Are you ready for biometrics?

It was the stuff of Star Trek, James Bond and other works of fiction or science fiction a few years ago: Computers that knew who you were based on biometrics. Biometrics, to some degree, has been around as long as there have been handwriting experts who could verify the authenticity of a person’s signature or

written word. In the present day, that verification removed the human element and has gone ‘digital’. Today, biometric technology is moving to the mainstream and with technology prices that have dropped low enough to move that technology to the desktop and even the laptop. What is the current state of the art in this technology today and what intelligent methods can the devices use to determine who you are, log you into resources and even protect them from tampering, theft or unauthorized access? That is what I will explore in this edition of the newsletter.

What is biometrics?
Let’s start with a definition, courtesy of the folks at Webopedia.

Biometrics: (bī´´ō-met´riks) (n.) Generally, the study of measurable biological characteristics. When dealing with computer security, biometrics refers to

authentication techniques that rely on measurable physical characteristics that can be automatically checked. There are several types of biometric identification schemes which include facial recognition, finger prints, retina and iris scans, vein patterns and even voice. Many of the techniques are still very expensive, but the use of fingerprint scanners is becoming widespread and the cost is dropping.

How fingerprint scanners work
A fingerprint is made up of a pattern of ridges and furrows as well as characteristics that occur at Minutiae points, that is ridge bifurcation or a ridge ending as seen in the picture on the right. Fingerprint scanning essentially provides an identification of a person based on the acquisition and recognition of those unique patterns and

ridges in a fingerprint. While the fingerprint identification process varies slightly between products and systems, the basis of identification is mostly the same. The system contains the following components:

1) a sensor for scanning a fingerprint
2) A processor which stores the fingerprint database
3) Software which compares and matches the fingerprint to the predefined database.

Inside the database, the fingerprint is linked to a unique reference number or PIN (Personal Identification Number) which is then in turn linked to that user’s name and account. In instances of security, the match is generally used to allow or disallow access, but today this can also be used for something as simple as a time clock or payroll access

Is this technology being implemented?
The simple answer is yes. Corporation and large government organizations are using biometrics. It plays a huge role in employee identification and security. With the aid of data centers, the technology is helping secure VPN connections for mobile commuters as well. The only downside to this type of implementation is that the cost of implementing fingerprint and other biometric security scanning in data centers is still quite expensive. Many locations still rely on ID badges, some with

Smart Chip / Smartcard technology while they wait for pricing to drop and for biometric technology to become more palatable to the bottom line of the budget. Still, companies have realized that fingerprint scanning is an effective means of security. While the cost of implementing biometric scanners in larger organizations and data centers is still quite high, we did find several fingerprint scanning devices which would fit into the budget of many small offices and home users. These home and small office products are designed to protect your hard drive, notebook or even to remove the need for users to remember multiple passwords.

Low cost scanners
Due to the falling costs, fingerprint scanning devices are by far the most popular form of biometric security used. There are many vendors marketing the devices to

the general and mass market. When the units first started there were very large and bulky. Those days are gone now, with devices smaller than your mouse, connecting via USB. In fact, the fingerprint scanning device can be small enough to be incorporated into a laptop for security.

Questions or comments?
I always welcome questions or comments on my articles. Should you have any, please let me know, and as always, thanks for reading my contribution to our newsletter!

All product names / logos, company names / logos are copyrights of their respective holders. John Boline is an MCSE, CNE, USE and a member of the Network Professional Association. The content herein is often based on late-breaking events. Much of the material is based on information from sources that are believed to be reliable. Hagerman & Company, Inc. disclaims all warranties as to the ultimate accuracy or completeness of the information. Hagerman & Company, Inc. and its employees shall have no liability for errors, omissions or inadequacies in the information contained within this article or for any interpretations thereof. The recommendations, positions and best practice policies outlined herein represent Hagerman & Company, Inc. initial analysis and therefore are subject to change as further information which may have bearing on these positions is made available. The reader assumes sole responsibility for the selection of these materials to achieve its intended results. The opinions expressed herein are subject to change without notice. Entire contents © 2006 Hagerman & Company, Inc. All rights reserved. Reproduction of this publication in any form without prior written permission is forbidden.

top

Securing the desktop: Are you ready for biometrics?

Securing the desktop:
Are you ready for biometrics?