Authentication with biometrics
Hi all!
I'm working on a project where I use fingerprints for authentication on the internet instead of passwords. This is what happens: Someone accesses my web-site. To log on they put their finger on a fingerprint-pad and then some pre-installed software sends the whole fingerprint to my server for authentication. The transmission is encrypted using PKI. If OK, they gain access to an extranet.
Many applications use biometrics for authentication, but I think mine's a little different. Other apps map the fingerprint against a password on the client, and then sends the password for authentication on the server. But I use a sentralized database of fingerprints.
What I need to know is if there are other solutions similar to mine that you know about. I've searched the net and haven't found anything (just the apps that map to passwords). Perhaps some of you can help me out? Thanks!
No system will ever be 100% secure
While I agree with Focmaester that fingerprinting will not be a 100% secure identification method, it must be said that no system is ever 100% secure.
It's all a question of using combinations of systems. For example, you could add a retinal scanner to the fingerprint. Or you could ask for a password on top of it. So not only would you need to get Proactive's fingerprints on that beerglass, but you'd also need to steal his eye and get him to give you his password.
There might also be ways to avoid the use of latex. Could a temperature sensor or such indicate the possibility that the fingerprint reader is not in direct contact with skin?
Besides, many methods will fail against social engineering ...
Anyway, security is always a complete package, not just one method.
Just my take on it ...
BrainStop
Re: No system will ever be 100% secure
Quote:
Originally posted here by BrainStop
While I agree with Focmaester that fingerprinting will not be a 100% secure identification method, it must be said that no system is ever 100% secure.
It's all a question of using combinations of systems. For example, you could add a retinal scanner to the fingerprint.
BrainStop
Retinal scan hasn't been proven to work 100%, if you used to wear contacts, you build up a certain scarring that wil heal and go away. But it's stil is inacurate.
But the password idea, I think that's a lot better.