CORDIS Archive

[Decisions | ETS | Evaluation | Downloads]

Review and evaluation of Biometric Techniques for Identification and Authentication

This study was conducted by:

Dr. Despina Polemi,
Institute of Communication and Computer Systems,
National Technical University of Athens,
Heroon Polytechniou 9,
GR-157 73,
Athens, Greece,
tel: +30-1-7722466,
fax: +30-1-7723557,
E-Mail: polemi@softlab.ece.ntua.gr

Purpose and scope

The primary goal of this study is to review and evaluate the above biometric methods to address the two major security concerns: identification and authentication. Based on the available literature such as papers, technical reports, evaluative studies, manufacturers and designer claims it will set selection criteria, define threats, evaluate biometric methods, and list their present and future applications.

Approach

Identification is the process whereby an identity is assigned to a specific individual. There is a variety of means for identifying a person's identity e.g. appearance, social behavior, name, codes, knowledge, bio-dynamics, natural physiography.

Authentication is the process designed to verify a user's identity. The goal of authentication is to protect a system against unauthorized use. This feature enables also the protection of subscribers by denying the possibility for intruders to impersonate authorized users. Authentication procedures are based on the following premises:

• Proof by Knowledge: what the person knows.
• Proof by Possession: what the person owns
• Proof by Property: what the person is.

Traditional technologies (based on the first two premises) are not sufficient to reduce the impact of counterfeiting. Additional convenient security barriers are needed as our society gets more and more computer dependent. Biometrics provide an answer to this need since the uniqueness of an individual arises from his personal or behavior characteristics with no passwords or numbers to remember. The most common biometric techniques are: Signature Verification, Retinal Analysis, Facial Analysis, Fingerprint verification, Hand Geometry, Voice Verification. Other biometric methods are: DNA pattern, ear recognition, odor detection, sweat pores analysis, key stroke analysis, head analysis.

First, a generic approach for all biometric identification methods will be undertaken where technical aspects of the biometric systems are described in general, e.g. performance measurements, places where templates can be stored. Threats based on the security objectives of identification and authentication will be described and a list of applicability criteria will be presented. Each biometric method will be studied separately. In particular each method will be described and examined against the criteria and threats listed earlier. The application areas and products for each method will also be presented.

Setting security standards in any information system is important for its exploitation. In this study the various standardization bodies for promoting and issuing standards for the biometric technologies will be listed.

Finally, a list of present and future applications in the areas where biometric technologies are most applicable such as social services, physical access control, computers and networks, banking, law and order will be presented.

Feedback and comments regarding INFOSEC,
should be addressed to:

DG XIII - C.4
European Commission