Home > Ask the Security Experts > Identity Management and Access Control Questions & Answers > How can the combination of biometrics and electrophysiological signals be used for authentication?
Ask The Security Expert: Questions & Answers
EMAIL THIS

How can the combination of biometrics and electrophysiological signals be used for authentication?

Joel Dubin, past SearchSecurity.com expert EXPERT RESPONSE FROM: Joel Dubin, past SearchSecurity.com expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 23 August 2007
I've heard a lot about biometrics and electrophysiological signals. How do they work? How old is this method? What are the pros and cons, error rates, and how does the cost weigh against other biometrics methods? What is the likelihood that this technology will eventually become a dominant form of biometric authentication?

>
The biometrics device you mention, using electrophysiological signals, was developed by Aladdin Knowledge Systems, which first demonstrated a prototype at the RSA Conference in 2006.

This product, when publicly available, will be part of the vendor's eToken multifactor authentication suite. It works by measuring a user's cardiac signals, what it calls a biodynamic signature. The signature, like that of other less esoteric biometrics devices, is unique to every individual and is difficult to spoof. The technology was developed in conjunction with an Israeli biometrics firm, IDesia.

The device consists of a round USB token with two tiny finger pads. Upon first use, the user puts two fingers, one on each pad, onto the device, which registers the user's electrophysiological signal. When he or she wants to log onto the system later, they touch the token again with their two fingers. The person's signal is matched against the one stored in the system and, if identical, access is granted.

I actually saw a demonstration of the device at Aladdin's booth at the RSA Conference last year. It was impressive, but still in the prototype stage. Aladdin had planned to roll out the device to the public sometime this year.

Since it's still apparently in development, any comments on the product's cost, error rates and likelihood of dominating the biometrics market would be pure speculation. The technology and the device are simply too new to make judgments about. Yet it's certainly an interesting technology worth tracking.

For more information:

  • Learn about the risks associated with implementing biometric data and how to avoid them.
  • Security expert Joel Dubin examines how authentication credentials, such as biometric data, are in need of more protection from government regulations.


  • BROWSE BY TAG
    Identity Management and Access Control,   Enterprise Identity and Access Management,   User Authentication Services,   Biometric Technology,   Expert Archive: Identity Management and Access Control,   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED CONTENT
    Identity Management and Access Control
    Is Identity Management as a Service (IDaaS) a good idea?
    How to log in to multiple servers with federated single sign-on (SSO)
    How to confirm the receipt of an email with security protocols
    Learn about enterprise strategy for server virtualization single sign-on
    Employee information security awareness training for new IAM systems
    Can you combine RFID tag technology with GPS to track stolen goods?
    Is there a free enterprise-caliber password-management tool?
    Cryptosystem attacks that do not involve obtaining the decryption key
    Can any firm or organization get a digital signature certificate?
    Should the CTO have domain administrator access?

    Biometric Technology
    Group to shed light on secure identity management threats
    Biometrics project studies ways to combat bank fraud
    Apple iPhone app could boost two-factor
    Vein-reader biometric authentication for health care, financials
    Exploring authentication methods: How to develop secure systems
    Biometric authentication know-how: Devices, systems and implementation
    Pre-boot biometric user authentication tools and strategies
    To what exactly would a request for biometric data from an insurance provider pertain?
    Keystroke recognition aids online authentication at credit union
    What are the possible benefits of microchip implants and RFID tags for employees?
    Biometric Technology Research

    Expert Archive: Identity Management and Access Control
    Enterprise password management policy: Finding the balance
    How to conduct a periodic user access review for account privileges
    Options for a mechanical door security system on a server room door
    Comparing access control mechanisms and identity management techniques
    User provisioning and SSO for PeopleSoft- and Unix-based products
    Could someone place a rootkit on an internal network through a router?
    Should a new user have to confirm an email address to gain access?
    Can home PCs provide a way for viruses and spyware to enter a corporate LAN?
    What should an enterprise look for in a password token and a vendor?
    Using batch files for temporary user access to the local admin group

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    biometric payment  (SearchSecurity.com)
    electro-optical fingerprint recognition  (SearchSecurity.com)
    false acceptance  (SearchSecurity.com)
    finger vein ID  (SearchSecurity.com)
    fingernail storage  (SearchSecurity.com)
    keystroke dynamics  (SearchSecurity.com)
    live capture  (SearchSecurity.com)
    multifactor authentication (MFA)  (SearchSecurity.com)
    password hardening  (SearchSecurity.com)
    ridge  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts