Authenticating by physical characteristics.
WHAT IS USED
Fingerprints Face geometry Iris patterns Voice
Behavioural patterns: typing, gait
WHAT DISTINGUISHES BIOMETRICS FROM OTHER FACTORS
They cannot be changed if compromised.
WHY THAT IS FUNDAMENTAL
A leaked password is replaced; a leaked fingerprint template is not.
WHAT THAT ARGUES FOR
Never transmitting or centrally storing raw biometric data.
WHAT THE CORRECT PATTERN IS
Matching on the device, in secure hardware, releasing a credential on success.
WHAT FALSE ACCEPTANCE AND FALSE REJECTION ARE
Accepting the wrong person, and rejecting the right one.
WHAT THE TRADE-OFF IS
Reducing one increases the other.
WHAT PRESENTATION ATTACKS ARE
Fooling a sensor with a photograph, recording, or replica.
WHAT LIVENESS DETECTION ATTEMPTS
Distinguishing a live person from a reproduction.
WHAT TO KNOW ABOUT ACCURACY
It varies across demographic groups, and systems have performed measurably worse for some.
WHAT THAT REQUIRES
Testing across your actual population, and a non-biometric alternative.
WHAT OBLIGATIONS APPLY
Biometric data is treated as especially sensitive in most frameworks.
Take advice on your position.
