Biometrics Security News and Information

The Whole Thing

2009-12-29T09:56:22-08:00

Simultaneous Security

As we approach the new year of 2010, airport security has been one of the common themes of the Postings. In then, I have reviewed various Security technologies and infrastructures being employed, but above all, I have been very critical of the level of Security in airports here in this country.

I am not going to belabor the point once again, but my mantra has always been, and will continue to be, that we need to focus on what I term the “Human Factors” with regards to Security rather than all of the fancy gizmos and gadgets.

Well,as I was scouring the Internet for news stories, I came across a very interesting article about airport Security which totally sparked my interest and intrigue. I am sure all of you have heard of Cyprus, that famous tourist destination in the Mediterranean.

They have two airports known as “Larnaca” and “Paphos”. The former has plans of opening a new passenger terminal, and the latter has already opened up a new passenger terminal. So, together with the high levels of tourism and new passenger terminals, Security became of great importance.

To provide the best layer of Security possible, the “Nedap AEOS” system was chosen. But what is unique about this type of Security system is that it provides Security to both airports under one umbrella. Here are the details of it: “One of the main reasons for the airports to choose Nedap AEOS as its security management system is the combination of its open architecture and configurable software components, enabling the airports to be more in control of the enforcement of the tight security procedures. Another important reason to choose AEOS is its capability of managing the access control at both airports simultaneously. The implementation took place through Glosec Holdings Ltd, the daughter company in Cyprus of Nedap's certified Business Partner Orad Ltd. from Israel.” (SOURCE: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264099&arttitle=Nedap%20AEOS%20controls%20access%20at%20Larnaka%20and%20Paphos%20airports%20in%20Cyprus).

At the Larnaka airport, 88 Smart Card Readers are installed, and up to 11,000 Smart Cards can be used with it. At the Paphos airport, 28 Smart Card Readers are installed, with up to 5,000 Smart Cards which can be used with it.

However, it should be noted that it is not just Smart Cards which are being used, but other types of Security devices as well, such as CCTV Cameras, and of course Biometrics, providing a true meaning to a Multimodal Security Solution.

Final Thoughts On Today’s Posting

Having a centralized Security system for both of these airports has a number of key advantages. First, is the very easy and the very flexible exchange of airport Security information and data between the two airports.

For instance, “The airports [Larnaka and Paphos] now have their own access control server, but thanks to Nedap's Single Server Multi Site solution both servers will be connected through an intermediate server in the near future. The big advantage of this is that the data of both airports can be easily exchanged. If an access badge is blocked at one airport, it is automatically blocked at the other airport as well. Similarly, all actions taken at one airport can have direct consequences at the other airport.” (SOURCE: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264099&arttitle=Nedap%20AEOS%20controls%20access%20at%20Larnaka%20and%20Paphos%20airports%20in%20Cyprus).

Second, the efficient and effective use of Gate Control at airports all over the world, whether it is large or small. With this Security System, gates at both the Larnaka and Paphos airports can be controlled automatically, as opposed to the manual system where an airport agent is required to open and deploy each gate locally.

As a result, the gates at these airports can be centrally managed in real time, the gates can be deployed much more quickly to serve the embarking/dismembarking passengers, and cost savings are also realized.

Third, with this new Security System, Human Resources benefits are also reaped. For example, “ . . . gates can be linked to an HR database that contains the personal data and biometric characteristics of the airports staff. With this link the staff members personal data are always current and directly available at the gate.” (SOURCE: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264099&arttitle=Nedap%20AEOS%20controls%20access%20at%20Larnaka%20and%20Paphos%20airports%20in%20Cyprus). This allows for a simultaneous check of the airport employee at both the physical Point of Entry and in real time in the HR database.

As I wrote this posting, a thought came to me. As much as I have been writing about the Human Factors approach to airport security, especially here in the United States, we need to look at airport Security from the overall perspective, and examine Security at each level and integration point at the airport.

I mean it is not just the passenger which is the potential Security risk. The employees of the airport and the airlines which fly in and out of it are also just as much of a Security risk.

This includes everybody from the flight attendants, to the cargo handlers, to the Security guards themselves.

What I found really encouraging about this article is, it appears, the people responsible for implementing this new Security system not looked only at the latest technology, but looked at Security from the broad picture, and drilled downwards to each specific piece and component of the airport.

It’s not just the Security technology. It’s not just the Human Factors. It’s the whole thing.

Source for this Posting: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264099&arttitle=Nedap%20AEOS%20controls%20access%20at%20Larnaka%20and%20Paphos%20airports%20in%20Cyprus

The Need To Understand

2009-12-28T20:39:46-08:00

The Bigger Argument

Throughout this year, I have written many Postings about two types of Security documents-namely the National ID Card and the e-Passport. Between the two of these, the e-Passport has been much more widely accepted as a means to the traditional passport.

Essentially, this is a Biometric Passport, and will essentially do away with all of the paper processes with the traditional passport.

However, the National ID Card has received a much more colder response. Depending upon the country one is examining, some of the reasons cited for this include civil liberties being taken away, the government misuse of the data and information collected for the National ID Card.

And, there is the belief that the National ID Card will do absolutely no good, and it will not defend a nation’s citizens as a whole.

However, today I came an interesting article which provides a different insight into the National ID Card, from the viewpoint and opinions from the United Kingdom.

Essentially, this article is stating that the overall, macro picture needs to be taken into account into the protection of its citizens. In the United Kingdom, this is known as the “National Identity Scheme.”

Also, the argument is further made that the National ID Card is just one part of the National Identity Scheme, and in the end, does not really provide any extra layer of Security. For example, “Whilst the National Identity Card has been hijacked by different organisations making proclamations ranging from the end to freedom as we once knew it in the UK to it being the silver bullet against terrorism, it is in fact the underlying National Identity Scheme - of which the ID Card is but one service - which is a truly an insightful and intelligent response to the growing problems of identity fraud in the UK . . . the National ID Card is irrelevant and takes disproportionate limelight against a wider debate - so let’s imagine it doesn’t exist.” (SOURCE: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264062&arttitle=National%20Identity%20Scheme%20is%20an%20intelligent%20response%20to%20the%20growing%20problems%20of%20identity%20fraud%20in%20the%20UK).

Final Thoughts On Today’s Posting

For the longest time, as a technical writer in Biometrics, I have always been scratching my head as to how and why the National ID Card is having such a hard time being accepted, especially in the limelight that other Security documents seem to be globally accepted, such as the e-Passport, as mentioned previously.

Yea, there are the other reasons also stated earlier, but a new thought came to my mind as I read through the article, and as I was writing this Posting. Let’s take the example of here in the United States.

People here do not understand the underlying reasoning for the thought of introducing a National ID Card System. In other words, we don’t have a National Identity Scheme like it is the United Kingdom.

There is no arching foundation from which the National ID Card could be leveraged off of, and would be just one form of another type of Security, in the face of a grander scheme and a macro way of thinking.

Instead, as citizens of the United States, we are just told that a National ID Card will be possibly adopted and implemented one day, and we have no choice in the matter, it has to be accepted no matter what.

As a result, we feel constrained and that our civil liberties of personal privacy and personal freedom will be taken away.

Instead, if we the citizens of the United States are told in clear terms the direct benefits of a “National Security Scheme” (this is a term I have coined up, to make it sound similar to the National Identity Scheme in the United Kingdom), and how the National ID Card would be just one part of this, perhaps acceptance would be greater.

This is being attempted in the United Kingdom, with their National Identity Scheme. For example, “It will [the National Identity Scheme] provide certainty that visa applicants to this country are applying legitimately and not subverting the system. It will also ensure that legal asylum seekers are afforded the right protection, the right resources and that they have not landed elsewhere in Europe first. And finally, it will enable people seeking work from outside the UK to gain some legitimacy and for employees to have some certainty given lack of UK paperwork.” (SOURCE: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264062&arttitle=National%20Identity%20Scheme%20is%20an%20intelligent%20response%20to%20the%20growing%20problems%20of%20identity%20fraud%20in%20the%20UK).

In conclusion, we as citizens, need to see and understand the benefits the investments the Federal Government is taking to protect us.

As an example, it is just as murky and unclear as the Stimulus Bill and Healthcare Reform, because I do not see or understand the direct benefits of the investments and Legislations being made. If I saw this, perhaps I would be much more accepting of it.

Source for this Posting: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264062&arttitle=National%20Identity%20Scheme%20is%20an%20intelligent%20response%20to%20the%20growing%20problems%20of%20identity%20fraud%20in%20the%20UK

A Merry Christmas To All

2009-12-25T08:54:00-08:00

To all of my subscribers,

Have a Merry Christmas!!! Hope you enjoy the holiday!!!

Best regards,

Ravi Das, Technical Writer, Cadmium Advanced Technologies

From The Inside Looking Outwards

2009-12-25T08:51:50-08:00

The Network Access Control Appliance

When one thinks of network the thoughts and images of Ethernet cables, firewalls, routers, switches, and hubs all come into play.

Well, there is another network security device out there, and it is known as the “Network Access Control Appliance.”

One of the key differences between this and the other above mentioned security devices is that with the appliance, it provides network security from within the place of business or organization (in other words, it provides security from within the perimeter), and the others just provide security from the outside (in other words, security is provided from the outside of the perimeter).

For example, “ . . . Network access control (NAC) devices protect networks from threats originating internally, in contrast to firewalls, which provide network security from external threats such as malware or hackers. More and more organizations face serious network security challenges like breaches and data leaks that threaten their clients’ information or their own IT security.” (SOURCE: http://findbiometrics.com/industry-news/i/7623/).

Well, a Security Vendor known as “Black Box Corporation” produces such devices like the appliance, and in fact, one of its products was just voted by a publication known as “SC Magazine” as one of the most twenty influential Security products within the last twenty years. Their product is known as “Veri-NAC”.

Final Thoughts On Today’s Posting

This product mentioned in this Posting was chosen primarily because of its low cost, flexibility, and ease of use, all critical components of a Security device, from the standpoint of the end user.

It’s not everyday I write something devoted exclusively to a topic like network security. But as I was reading through the Press Release, it dawned upon me, that as a society, we often look at things from the outside looking inwards.

This is especially true for Security. We are often obsessed with the latest gadgets which provide Security from the threats which exist from the outside, and not those threats which exist from the inside.

This could be very well the reason why are not nearly as Security conscience or proactive like other countries around the world are.

This is also true for Biometrics. Most of the applications I have written about this year have been about trying to gain access, whether it is an actual entry or login, from the outside world to within the inside the place of a business or organization.

But how about the other way around???

Internal Security is just as important, if not more, than external Security. Just as much as new hires are scrutinized with a background check for a new job, perhaps Security Policies should be rewritten so existing employees are scrutinized to the same degree periodically.

Of course, employees are just one example of a possible Security threat or risk, and there are many other of hundreds of types internal Security threats as well.

My point is, perhaps starting in 2010, as a society, we need to have a fundamental shift in the way think about our Security Models and Security Policies: Let’s start looking from the inside looking to the outwards.

Also, I will try to make my Postings starting in 2010 to reflect this new way of thinking.

Source for this Posting: http://findbiometrics.com/industry-news/i/7623/

Software as a Service

2009-12-24T09:45:59-08:00

The Software as a Service Concept

How many of you out there have heard of this new buzz word??? Another name for it is “SaaS”. Essentially, this is a service where “ . . . a provider licenses an application to customers for use as a service on demand. SaaS software vendors may host the application on their own web servers or download the application to the consumer device, disabling it after use or after the on-demand contract expires.” (SOURCE: http://en.wikipedia.org/wiki/Software_as_a_service).

Most of the SaaS applications these days are hosted at the hundreds of Internet Service Providers.

For example, with my ISP, Exchange Server is a hosted application, and thus it can be considered as a SaaS, because there are other communication functions associated with it (like IM, Wireless) which are not related to E-Mail.

The SaaS function is making its way into the Biometrics world. This is exemplified by the fact of the strategic alliance just announced between the Communications Intelligence Corporation (CIC) and enTrust & Title Enterprise.

The former is a Biometrics/Security Vendor, and provides Signature Recognition solutions. The latter is an escrow and title based in Dubai, and is apparently the first of its kind there.

Under the statutes of this agreement, Signature Recognition solutions will be provided on the enTrust & Title Enterprise software system, and together, this will be bundled as a SaaS offering. Here are the details of it: “Under the terms of the agreement, CIC is providing its industry proven electronic signature technology to perform biometric verification of handwritten signatures on enTrust's enTTE system, an enterprise system SaaS platform to eliminate misrepresentation and provide additional layers of security for title and escrow transactions. The combined offering will be available and support multiple hosts in multiple countries enabling real-time verification of biometric signatures and the binding of signatures to the documents with enTrust & Title documents.” (SOURCE: http://findbiometrics.com/industry-news/i/7626/).

Final Thoughts On Today’s Posting

Apart from user convenience, one of the biggest advantages of this type of SaaS offering is the increased and higher levels of Security and protection, both the for the service provider and the customer involved.

In the application described in this Posting, all three sides of the real estate party are protected, namely the buyer, the seller, and the landlord/tenants (if this is a rental type of agreement).

For example, “ . . . The issues of legal ownership, authority to enter into contract, registration of deed, misrepresentation, financial disclosures, and non-availability of documents in time for a resale, are resolved when using the enTrust's Escrow Services.” (SOURCE: http://findbiometrics.com/industry-news/i/7626/).

As I am writing this Posting, another new thought came to my mind. I have been a proponent of hosted Biometric Solutions, very much like hosted e-Commerce and Web Hosting solutions.

This offers great advantages, especially in terms of cost savings to small business owners who could not normally afford a Biometric Solution for their place of business or organization.

I have written a number of Postings about this this year, but instead, of offering Biometrics as 100% solution, why not make it SaaS offering, and bundle it with other packages which are already hosted???

For example, earlier in this Posting I had written about Exchange Server in my hosting plan. Why not bundle that with a Biometrics Solution to offer extra layers of protection???

This way, the customer will be more ept to choose a Biometrics Solution, rather than buying a hosted solution separately. As a result, this will greatly enhance the acceptance of Biometrics in the long term.

Software as a Service is the big and coming thing (along with Web 2.0), so why can’t Biometrics be a part of it and capitalize upon this trend???

Food for thought . . . .

Source for this Posting: http://findbiometrics.com/industry-news/i/7626/

Checking Out

2009-12-23T10:32:10-08:00

Tracking Your Keys Down

How many times have you lost or fumbled for your keys??? Are you always paranoid of getting your keys back after you have loaned them out???

Except for my passwords, I am next protective of my keys, even if I loan them out to my best friends.

Well, a hospital in Manchester, United Kingdom is a perfect case of keys being lost and misplaced by their employees. In fact, the “ . . . Manchester NHS Trust hospital . . . [lost] . . . over £6,000 within a 2-year period in re-keying and replacement locks alone. Further costs were incurred in the tracking down of lost / mislaid keys and trying to identify which employee last had the particular key.” (SOURCE: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264097&arttitle=Kalamazoo-Reynolds%20KeyTrak%20allows%20the%20pharmacy%20workers%20at%20Manchester%20hospital%20to%20remove%20keys%20without%20supervision).

To help combat this problem, the hospital implemented a solution known as “KeyTrak”. In other word, the employee or worker of the hospital has to sign out for the keys.

But what is unique about this that rather than using the traditional password, Biometrics are used for Verification, in order to insure that right person is taking out the appropriate key. In this case, Fingerprint Recognition is primarily used.

Final Thoughts On Today’s Posting

This system possesses a number of key benefits. First, the keys can only be issued for a maximum period of eight and a half hours. This is a Security measure to help insure that employees do not take the keys issued to them to unauthorized places, such as their home.

And, if it does happen, an alarm is sounded, and the contact information of the employee whom has the overdue key will appear.

Second, this system, based upon the article I read, appears to be very easy to install and implement, with minimal amounts of effort needed. Just like other Biometric Devices, the KeyTrak system can either operate as a standalone unit or in a networked environment.

Third, with this system, only the person who checked out the key can return it, and nobody else. This is analagous to the problem of buddy punching in Time and Attendance applications.

I think this is the second type of Posting I have written about in which Biometrics are used to “check something out”. The only other application I have written about which comes close to this is the use of Biometrics in subsidized school programs, in which children can use their Fingerprint to pay for a school lunch.

The Fingerprint System Verifies the child, and after Verification, the money for the school lunch is then deducted from the appropriate account.

As Biometrics become cheaper and easier to implement, we will probably see much more of its use to “check out things.” A perfect example of this would be your local library.

Rather than using the traditional library card to check out your book, you can use your Fingerprint to check it out, or if it is a more sophisticated Biometric System, perhaps an Iris Scan or even a Facial Scan be used.

In my view, the “checking out application” could very well help with the public perception and acceptance of Biometrics. Take for example once again, your local library.

If Biometrics were implemented nationwide for such an application, the public will see how easy it is to use Biometrics, and the benefits and advantages it has (such as not having to wait in a long line to check out your book).

However, education to the public will be key here. For example, some years ago, at my local grocery store, a Fingerprint System was used so people could pay for their groceries with their Fingerprint.

The Fingerprint was associated with their respective Checking Account number, and the appropriate amount was then deducted a couple of days later. But because of the lack of education to the customer, this created a very luke warm demand for the new way to check out your groceries, this resulted in the Fingerprint System being discontinued months later.

So, here is a novel and old fashioned concept for Biometrics: Checking out.

Source for this Posting: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264097&arttitle=Kalamazoo-Reynolds%20KeyTrak%20allows%20the%20pharmacy%20workers%20at%20Manchester%20hospital%20to%20remove%20keys%20without%20supervision

Remote Locations

2009-12-22T10:27:35-08:00

Remote Access

Here is something I have not talked about or mentioned previously in other Postings: The ability to carry out Verification and/or Identification tasks remotely.

Well, a Biometrics/Security Vendor known as “CEM Systems” has just announced it has launched a new type of Fingerprint Reader, which is portable, and can carry out transactions remotely. This new product is called the “S3020f Portable Fingerprint Reader”.

Here are the details of it: “Unlike comparable solutions that save fingerprint templates only to a smart card, the S3020f reader captures fingerprint templates on the central CEM AC2000 access control enrolment station. Fingerprints are read and encoded as numerical values on the AC2000 database, meaning that physical fingerprints cannot be stored or copied. All data is subsequently saved to the AC2000 server and uniquely distributed to the S3020f reader for local storage in its internal database. Verification is then carried out by comparing this number against the S3020f reader internal database.” (SOURCE: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264059&arttitle=CEM%20S3020f%20Portable%20Fingerprint%20Reader%20allows%20random%20ID%20card%20and%20fingerprint%20security%20checks%20to%20be%20carried%20out%20at%20temporary%20entrances).

Final Thoughts On Today’s Posting

This new type of Fingerprint Reader has a rather massive database, compared to some of the other products I have mentioned recently in the past couple of months. For example, up to 100,000 Biometric Fingerprint Templates can be stored, and up to 8,000 Verification and/or Identification transactions in an offline mode.

This product also supports a number of different types of Smart Card Technologies, including the HID iClass, MiFare Smart Card, etc.

So what do I exactly mean by remote access???

It is mentioned in the quote above. Like in all other types of Biometric devices (whether it is Facial Recognition, Fingerprint Recognition, Iris Recognition, etc.) all of the Enrollment and Verification Templates are stored within the database of that particular device, or the information and data is transmitted to a central server, in a client server topology.

For purposes of this Posting, this can be considered to be the first place of storage.

But what is unique about this application is that this information and data is then transmitted to the various Fingerprint Readers, which are then stored in its local database. Also for purposes of this Posting, this can be considered to the be the second place of storage.

Security is guaranteed, and one Security measure taken is to assign numerical values to the Biometric Templates which are contained at the first place of storage. These values are then compared to the numerical values which are assigned to the Biometric Templates in the second place of storage.

In other words, multiple storage is allowed, and a redundant system is in place. Because of this level of redundancy, a feature known as “Occupancy Mode.” For example, this “ . . . allows a head count of individuals in a defined area. This prevents card sharing and provides the ability to do spot checks on a set group of people in a particular zone. For example, patrolling checks can be performed on workers coming into construction sites on buses to ensure that all passengers have authorised access.” (SOURCE: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264059&arttitle=CEM%20S3020f%20Portable%20Fingerprint%20Reader%20allows%20random%20ID%20card%20and%20fingerprint%20security%20checks%20to%20be%20carried%20out%20at%20temporary%20entrances).

Probably the biggest advantage of this product is that it allows for the Verification and/or Identification of various workers and other types of employees at remote locations where there is no permanent office or business infrastructure, and where a constant source of power can be a big problem.

During the course of this year, I have written a couple of Postings as to how this remote type of application can be used for the Health Care industry, especially for those workers who are mobile and have to provide for care for people (especially the elderly) at their individual homes.

Keeping accurate hours worked, document verification, keeping track of the employee’s geographic location of work, etc., has always been a big problem.

A recent solution adopted for this was the use of Cellular Phone technology. But as I write this Posting, I think this new type of Fingerprint Reader could possibly work just as well.

Yesterday I wrote about Biometrics being used for the small business, and today it is about Biometrics for the temporary locations. I think the latter will hold more promise in the coming year, as we have an even bigger remote and more mobile workforce worldwide.

Source for this Posting: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264059&arttitle=CEM%20S3020f%20Portable%20Fingerprint%20Reader%20allows%20random%20ID%20card%20and%20fingerprint%20security%20checks%20to%20be%20carried%20out%20at%20temporary%20entrances

The Small Business

2009-12-21T18:31:36-08:00

The Family Business

Just a quick note to my subscribers: My Postings this week will be shorter than normal, due to the fact that I am away for two weeks for the holidays. However, I still want to keep all of you informed of what is happening in Biometrics worldwide, so here we go.

One of the most common applications for Biometrics, as I have written many times, has been about Time and Attendance Applications, especially here in the United States. When one thinks about this type of application, one often thinks of the large factories and warehouses which use Biometrics to keep track of their employees.

However, Time and Attendance applications are now making their to the family business. I just came across an article which profiles such an example. The business is based out of the United Kingdom, and is called “Frostree, Ltd.” They just opened a new factory in a location known as Stockton.

They just deployed a Fingerprint Scanner to record and monitor the various check in and check out times of their employees.

Here are the details of this implementation: “The biometric time and attendance system was supplied and fitted by Blaydon based North East Time Recorders and will automatically calculate payroll, saving on administration costs. There is an added health and safety benefit since the system provides accurate information on exactly who is in the building in the event of emergency. The biometric system is the latest in a long line of attendance systems Frostree have commissioned from North East Time Recorders over two decades.” (SOURCE: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264130&arttitle=Frostree%20deploys%20biometric%20fingerprint%20scanner%20to%20record%20time%20and%20attendance).

Final Thoughts On Today’s Posting

Biometrics will for sure play a very pivotal role in this company as they expand into the future. According to the article, they are planning to increase their workforce from fifty employees to thirty employees in the coming year.

As the global recession hopefully eases its grip by next year as predicted, Biometric Time an Attendance Solutions will for sure be making their way from the large factories and warehouses to the smaller based businesses, such as the one described in this Posting.

With more money and capital to spend hopefully by next year, it could very well be the small business which leads the way for Biometrics into the coming decade.

Source for this Posting: http://www.biometricnewsportal.com/biometrics_news3.asp?articleid=264130&arttitle=Frostree%20deploys%20biometric%20fingerprint%20scanner%20to%20record%20time%20and%20attendance

A Quicker Way To Do e-Commerce

2009-12-18T10:19:55-08:00

New Patents Awarded

In my view, whenever a Patent is awarded to a Biometrics/Security Vendor, I consider that to be a “good news biometrics.” To me, it shows active Research and Development taking place. I think it is very important to note in Postings as to when Patents were awarded, and the details of them.

Well, today, I came across a Press Release in which a Biometrics/Security Vendor known as “ImageWare Systems, Inc.” was just recently awarded two major patents by the United States Trademark and Patent Office.

The first patent deals with the way Biometric information and data is extracted and managed, in Multimodal Security Solutions.

Here are some of the details: “The first new patent (# 7,596,246) details ImageWare's intellectual property as it relates to scalable, multimodal biometric data management by using multiple, disparate biometric matching technologies and a "router" by which this data can be created, managed and queried.” (SOURCE: http://findbiometrics.com/industry-news/i/7614/).

The second patent deals with the processing of the various Biometric Template in the Verification and/or Identification of the individual seeking authorization.

Here are some of the details: “The second new patent (# 7,606,396) defines the process by which multiple biometric modalities can be combined to accurately identify one or more individuals.” (SOURCE: http://findbiometrics.com/industry-news/i/7614/).

Final Thoughts On Today’s Posting

So as one can see, these Patents awarded deal primarily with the use of way or another of Multimodal Biometric Solutions.

In the past couple of weeks, I have described the results of surveys and findings conducted by various types of organizations in which they discovered that the respondents to these studies highly favored some newer and more sophisticated method of authentication rather than using the traditional password.

In fact, see yesterday’s Posting about the use of Voice Recognition, and the strong advantages it possesses for password resets.

These studies also indicated that respondents had a much more favorable view of Biometrics, if it is used in regards to replacing the password once and for all.

I think 2010 could prove to be a great year and boon for the Biometrics Industry in this regard.

Hopefully as the global recession starts to ease its grip and people have much more purchasing power than they have currently, e-Commerce and other types of online shopping hopefully will pick up.

And with these types of activities picking up, the demand for quick and easy authentication to online e-Commerce resources will be in greater demand, translating into a stronger demand for Multimodal Biometric Solutions.

Take for example, you find a product you want to buy online. You try to login into your account, and you cannot remember your password, or for some reason it does not go through the authentication process.

You have to call tech support, have a new password issued, go through the authentication process all over again, and finally purchase your item which many no longer even be there.

I am not saying that Multimodal Biometric Solutions will have all the answers, and it certainly has its fair share of flaws just like any other piece of technology or Security.

But just picture this in your mind: Imagine the above scenario versus being able to log into your e-Commerce account with just a swipe of your Fingeprint or your Iris, or perhaps even both.

Not only will you be able to make your purchase you wanted to very quickly and easily, but the e-Commerce Vendor will have one happy customer, who with a much higher probability of coming back for repeat business, rather than the frustrated customer who could not login properly the first time with just a password.

Who knows, perhaps this could be the theme for Biometrics in 2010: “A quicker way to do e-Commerce”.

Only time will tell.

Source for this Posting: http://findbiometrics.com/industry-news/i/7614/

A Win-Win-Win Situation

2009-12-17T10:21:35-08:00

Those Annoying Passwords

Usernames and passwords have been for the longest time the de facto standard for logging into a network, your computer (whether work or personal), and for e-Commerce. But how many Passwords do you have?

I think when I first started in the IT field, I only had one. I was doing my MBA back then, and the Internet was just starting to make its way. We still relied on the good ole mainframes for data access and communications.

The worst part was, since nobody was chained to their e-mail frequently as it is now, professors would often pop in a sneak homework assignment on the mainframe e-mail. And, if you did not check, ARGHH!!!!

Well, as the Internet and e-Commerce grew, so did the need for multiple passwords. People tried to keep this easy, by using the same password for multiple applications, but as Identity Theft and Phishing became the Security Threat trend, password entropy became a critical issue.

As a result, people had to not only create multiple passwords, but design them in such a way that they are almost impossible to remember, unless you are supporter of the “Post It Syndrome”, which is essentially sticking your multiple number of passwords on a Post It Note, and attaching it to your computer monitor.

Well, then came Biometrics, and this has offered (and continues to do so) a much needed relief to the use passwords, in which you can log into and/or be verified with a single scan of your Fingerprint or Iris.

However, the use of Biometrics has not done away with passwords entirely yet, as it is mostly used a Multimodal Security Solution in these types of applications.

So while the nemesis of passwords still linger with us, so do the headaches for the IT department who has to maintain and enforce the Security policies associated with usernames and passwords.

Probably the biggest headache is that of password resets. Every time you forget your password, you have to call IT support and have them reset it for you.

Well, there could be a possible solution to this, which will result in a win-win for all sides involved.

A Biometrics/Security Vendor known as “PerSay” has just announced that one of its customers, an e-Banking site, is using its Voice Biometrics Solution in a way that customers can reset their own passwords, without the need of the IT Department.

Here are some details: “This deployment marks a new era in the utilization of Voice Biometrics technology by financial services - enhancing the security of web sites and web-based transactions, enabling convenient multi-factor authentication. While current authentication processes mostly rely on information provided by customers ("something you know") that can be easily stolen, guessed, or retrieved, the new process combines biometrics ("something you are") as an additional factor, delivering higher security, which is in-line with emerging financial regulations . . . This is a new innovative self-service application, enabling customers to reset their eBanking password 24/7. It also replaces a costly and inconvenient manual questioning routine and eliminates the need to wait for a live agent.” (SOURCE: http://findbiometrics.com/industry-news/i/7619/).

Final Thoughts On Today’s Posting

To be honest, this is the first time I have seen Voice Biometrics being used not only for Verification and/or Identification, but also for password resets. In my view, this holds great promise, as the need for eliminating passwords will be an immediate, booming market trend.

I think what I like about this the most is that you, the customer, has entire control over your own password. In theory, yes, most applications do give this freedom, but in reality, it hardly ever happens. The financial sector will see immediate gains from this, as it is evident from this Posting.

For example, if a customer, wants to place an overnight trade, and if they cannot remember their password, they can immediately reset any time of day or night, and continue with their trade. Under traditional methods, the customer would have to wait until the next business day, contact IT Support, have their password reset, then place their trade.

This lag time could mean lost profits for the customer.

Apart from the customer, the IT Department has a lot to be gained as well from this type of Biometrics Solution. Their efforts and attention can be more focused on the critical Security tasks rather than the mundane and overburdening tasks of password resets for their users.

Finally, the place of business or organization, will stand to receive great benefits as well, primarily in terms of cost savings. It costs an average of $250 to reset a password for one person per year. If it is a large business, these costs can add up substantially, and very quickly.

This type of Voice Biometrics Solution can be a great winner for all types of organizations and businesses, especially in today’s economic climate.

So, in the end, yes, it is a win-win-win for all parties involved: The end user, the IT Department, and the place of business or organization.

Source for this Posting: http://findbiometrics.com/industry-news/i/7619/