Biometrics -- Using Fingerprints for Authentication.ppt

4 Mar 05 Biometrics -- Using Fingerprints for Authentication Todd Andel Cyndi Roberts CIS 5370 – Computer Security Spring 2005 * Overview Authentication Overview Passwords, biometrics Fingerprints for authentication Features matching Live-scanning of fingerprints Attacks Disadvantages of fingerprint authentication Fake finger, Trojan horse, replay, coercion Authentication Overview Authentication: Process of verifying identity Supports both the confidentiality integrity of the CIA model Authentication Overview Passwords Most common In theory strong: (e.g. 268 aprrox 2*1011) In practice weak: (e.g. dictionary words, related words) Authentication Overview Biometrics Physiological Iris Fingerprint (including nail) Hand (including knuckle, palm, vascular) Face Voice Retina DNA Even Odor, Earlobe, Sweat pore, Lips Behavioral (patterns) Signature Keystroke Voice Gait Fingerprints for Authentication Two premises for fingerprint identification Fingerprint details are permanent Fingerprints are unique Recent challenges to this claim Features Matching Features of a fingerprint Features Matching Minutiae matching Probability that two different fingerprints will share 12 of 36 minutiae points: 6.1 x 10-8 Quality of automated matching Based on number of matches: ? verification vs. identification False positive: imposter matches ? False negative: valid user matches ? Features Matching a: valid match 39 points left 42 points right 36 matches b: false positive 64 points left 65 points right 25 matches Live-scanning of Fingerprints Live-scan fingerprint sensing Three sensor types: optical, solid-state, ultrasound Live-scanning of Fingerprints Optical Sensors: “Picture” Frustrated total internal reflection (FTIR), optical fibers, electro-optical, direct reading Live-scanning of Fingerprints Solid-State Sensors: Direct conversion to electronic signal Capacitive, thermal, electric field, piezoelectric Live-scanning of Fingerprints Ultrasound Sensor