There are mixed opinions about biometrics, despite being a mature technology in many ways. Projects of scope — from retail chains to government programs — have taken the media spotlight. As a result, failure and success stories alike make it difficult for the industry to issue a sound verdict.
Unfortunately, it is not all smooth sailing. Failed projects include the high-profile and terminated Verified Identity Pass project in the US Verified Identity Pass, a provider of smart cards embedded with iris or fingerprint biometrics, recently operated at 20 US airports. Individuals would pay a fee, undergo a background check and receive expedited processing through security lines. However, government fear of terrorists with clean backgrounds exploiting the program prevented it from providing any benefit beyond a shorter line, and eventually the value of the service was diminished, said Walter Hamilton, Chairman of the International Biometric Industry Association and a Senior Consultant with Identification Technology Partners.
In security, established products are usually preferred to novel technologies, and biometrics is such a dynamic and research-intensive field that buyers are faced with products that have not had an ideal period of "settling in," said Stephen Wilson, MD of Lockstep Consulting.
If a biometric could be overcome by using spoofing techniques such as jelly fingers (fingerprint), or photographs and video (face recognition and iris), the potential losses and reputational damage could make it worthless as an authentication method, said Bill Reding, Information Security Consult ant of UK Payments. Additionally, minimizing false acceptances and false rejections is critical in ensuring security and customer acceptability. This makes accuracy a primary challenge and criterion of biometrics.
Biometrics testing involves a large number of different presentations of a body part, with measurements of false reject rate (FRR) and false acceptance rate (FAR), Wilson said. At present, there are few agreed standards for measuring and comparing biometrics performance.
Technologies Gaining Momentum
With fingerprint recognition in the lead, facial, iris, vascular, voice, signature verification and DNA are other viable alternatives.
Facial Recognition
Improvements in accuracy have placed facial recognition among the fastest growing biometrics. It is the primary biometric required for e-passports that comply with the International Civil Aviation Organization standards, said RJ Langley, VP of Daon.
"It can be captured in a non-intrusive way, and is relatively easy to automate," said Dr. Joseph Atick, Executive VP and Chief Strategic Officer, L-1 Identity Solutions. Because there is an existing database of face images, recognition systems can locate duplicate enrollments and eliminate identity fraud.
Large-scale areas such as stadiums, railway stations, malls and so on also pair facial recognition with video surveillance, said Navin Rajendra, Senior Research Analyst of Frost & Sullivan.
In conflict zones like Iraq and Afghanistan, facial biometrics are collected and matched against a database for ID checks during employment or access to secured areas. "Our department anticipates biometrics being used more and more for business applications such as equipment issue, verification of job and language skill testing, and management of personnel during transportation," said Myra Gray, Director of the Biometrics Task Force, US Department of Defense.
Iris Recognition
Acquisition of templates and availability of databases are the two primary challenges of iris recognition. Though high in accuracy, acquisition is difficult to perform at a distance, and more complicated when the subject is uncooperative, Atick said. Also, few databases exist as a starting point, unlike facial recognition with available digital images, Hamilton pointed out.
Despite these problems, ABI Research estimates iris recognition will have high growth, comparable to facial recognition. Recent innovations now allow the iris to be captured from a distance of 2 to 3 meters.
For user friendliness, capture devices can allow an individual to take two pictures and store both credentials on the device or a server. Identities can be matched, in less than two seconds, against the server database via Wi-Fi, Murad said.
Vein scanners have been gaining traction in markets like Japan and Korea, Rajendra said. The emphasis on hygiene has been a driving force for the use of contactless biometrics.
"We expect the global annual growth of vein authentication to be 26 percent from 2009 to 2011," said Tatsuya Yoshida, Assistant Manager, Security and Smart ID Solutions Division, Hitachi. "In Japan, 80 percent of banks, which use biometric identifications, are now implementing finger vein authentication."
Apart from financial institutions, small-scale access control for equipment such as lockers can embed finger vein scanners for heightened protection. In Japan, retail transactions can be carried out with finger vein authentication, Hamilton said.
Voice Verification
Voice verification is proving valuable for enhanced call center interactions, banking and payment adoption, said Jonathan Collins, Principal Analyst, Short Range Wireless, ABI Research. Experts say the algorithms cope well with signal variability over different telephony equipment and networks, although temporary changes to the voice caused by colds and allergies can be problematic.
Integration and Interoperability
The International Organization for Standardization has grown to more than 50 standards that will provide the basis for development and integration of biometrics equipment over the next five years. "Integration remains a significant industry in itself, worth more than $1 billion last year alone," Collins said.
However, interoperability issues remain. Each basic trait, such as face or fingerprint, will generally have more than one possible algorithm, and algorithms do not usually interoperate, Wilson said.
Multimodal technologies combine two or three biometric modalities for improved accuracy and flexibility, Atick said.
It is happening at the US Department of Defense with its Automated Biometric Identification System database, and will soon be employed with the FBI's Next Generation Identification program. "We, therefore, believe the modalities of facial recognition and iris scans are the next in line for widespread adoption for identification of terrorists," Gray said.
Facial sees wide adoption as a supplement to fingerprint in low-end consumer applications. A camera embedded with facial recognition software can be added to a fingerprint system, with the resulting product perceived to be more convenient and secure than fingerprint alone, Bailin said.