Some U.K. bank users ready to embrace biometrics

TalkBack 2 of 6:

Next »

« Previous

• Thread View
• Flat View

There are certain requirements for doing it right

To be successful in a consumer setting, certain requirements need to be met:

Scanner interoperablity - Any web-based finger authentication system must allow a user to authenticate using *any* of a broad set of finger scanners, since technologies and prices will change over time. We already see IBM using a different scanner than Toshiba and Fujitsu. Simply put, an initial device selection cannot be a trap.

Accuracy: With all the problems revealed recently with the FBI missing matches and making false matches, the accuracy requirements of a large scale system will need to be entirely of a different magnitude than they use, on the order of 1 in 100 million or more, to assure Positive, not "Possible" ID.

Secure pipeline: You need to have a secure transport between the browser-side components and the authentication server that only transports matching models using powerful encryption.

Think it doesn't exist? I can tell you it doesn't come from the guys who supply the government with their systems...

Posted by: SecurityThroughObscurity   Posted on: 05/07/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now