Security For the New Millennium Focus on Biometrics

1
Security For the New MillenniumFocus on
Biometrics

• Presented by
• William Ryman, P.E.
• EDI, Ltd.
• Consulting Engineers
• Atlanta, GA
• March 19, 2002

2
Security for the New Millennium

• In May of 2002 President Bush stated that foreign
  visitors seeking entry into the US will be
  required to carry an official travel document
  that would include
• biometric identification that would be
  fingerprints or facial recognition that will
  enable us to use technology to better deny
  fraudulent entry into America
• (Woodward, et. Al.)

3
What Is Physical Security?

• Physical Security is part of the larger overall
  organizational security program. It is
  specifically concerned with the various physical
  measures designed to safeguard people and assets
  and prevent unauthorized access to facilities or
  installations, equipment, materials and
  information.
• Physical Security is a system of tangible
  countermeasures designed to control access and to
  prevent the interruption of operations.

It is the basic element in any Security program
Protection of Assets Manuel
4
3 Key Aspects of Security
5
The Plan

• Defining Biometric
• Authentication Systems
• Product Focus Points
• Procurement
• Privacy Legal Concerns
• Questions?

6
Who Are You?

And How can I tell for sure?
7
Biometric

• Life measurement
• Automated methods for verifying or identifying
  the identity of a living individual based on
  physiological or behavioral characteristics (Ben
  Miller)
• Three basic considerations

8
Some History

• In Biblical Times
• Fingerprint Identification System (FIS)
• Online Assistance
• Biometrics In High Security Applications

9
08/13/2001 - Updated 0735 PM ET
Tampa installs high-tech security cameras TAMPA
(AP) Tampa is using high-tech security cameras
to scan the city's streets for people wanted for
crimes, a law enforcement tactic that some liken
to Big Brother. A computer software program
linked to 36 cameras began scanning crowds Friday
in Tampa's nightlife district, Ybor City,
matching results against a database of mug shots
of people with outstanding arrest
warrants. European cities and U.S government
offices, casinos and banks are already using the
so-called face-printing system, but Tampa is the
first American city to install a permanent system
along public streets, The Tampa Tribune reported
Sunday. A similar system was used at Super Bowl
XXXV, which was held in Tampa last
January. "Tampa is really leading the pack here,"
said Frances Zelazny, a spokeswoman for Visionics
Corp., which produces the "FaceIt" software.
10
User Authentication

• Identification
• Verification

11
Authentication Systems

• The Secret!
• What You Have
• Password / PIN
• ID Badges
• Card Access
• What You Are
• Biometrics
• Multifactor Systems

12
Threats Vulnerabilities

• Masquerade
• Trial Error
• Password Guessing
• Replication
• Theft
• Spoofing the System

13
Defenses

• Modify Secret
• Encryption
• Liveness Testing

14
The Process

• Enrollment
• Signal Processing The Template
• Decision
• Template Storage Methods
• Training the User

15
System Structures

• Local Storage
• Network Storage
• Portable Device

16
System Administration

• System Administration
• Database Management
• Priviledge Management
• Maintenance
• System Downtime

17
Biometric Systems

• Fingerprint
• Hand Geometry
• Voice Recognition
• Iris scan
• Facial Recognition
• Signature
• And Others

18
Product Focus Points - You

• Clearly Define Your Needs
• Your Environment
• Your Users
• Your Supporting Infrastructure
• Staffing
• IT
• Your Budget

19
Product Focus Points - Them

• Use Your Clearly Defined Requirements
• Review Various Technologies
• Understand Vendor Experience
• Review Third Party System Analysis
• Seeing is Believing!

20
Privacy

• Physical Decisional Information
• The High Tech Tatoo?
• Identity Safeguard!
• Privacy Enhancement?

21
Questions?
William Ryman, P.E. Principal EDI Ltd. Consulting
Engineers Atlanta, Georgia   (678)
202-0704 Bryman_at_ediltd.com