Biometrics no longer James Bond

Ken Doyle

Advertisement
In previous columns, I've discussed the growing security threats to corporate and personal computer networks from hackers, viruses and spyware. While both software and hardware to counter network attacks have become increasingly sophisticated, the weakest link in the chain is often the individual user who chooses an insecure password.

That's where biometrics steps in. There are basically three ways that you can prevent unwanted access to your data: something you know (passwords or PIN codes), something you have (a physical key or "smart card"), and something you are (a biometric). Over the years, biometric authentication technology has brought to market devices that were once found only in James Bond movies - retinal scanners, face recognition, voiceprint identifiers, body odor "sniffers," and even devices that can recognize you by the way you walk. For the typical computer user, however, the biometric that's most commonly used is also the oldest: fingerprints.

Fingerprint authentication devices offer several benefits. You don't have to remember multiple sets of passwords, since the device can be used to log in to your computer, a network, e-mail accounts and Web sites. You don't need to carry around a key card that can be easily lost or stolen. And, major surgery aside, it's pretty much impossible to trick a fingerprint reader that has been properly calibrated.

While other types of biometric authentication vary considerably in accuracy, fingerprint reader technology has improved substantially over the past couple of years. This accuracy, together with plummeting costs, makes fingerprint readers an ideal choice for authentication devices.

Stand-alone readers

These devices plug into a computer's USB port (or a PC card slot for notebooks) and are generally priced from $30 to $150. The more advanced models can be configured to recognize several fingers, which is handy in the event of injury, besides providing increased security. Most readers include software for securing user account logins, e-mail accounts, and Web sites (although some devices will work only with Internet Explorer). Major manufacturers include Microsoft, Sony, IBM, and HP/Compaq.

Integrated readers

The relatively small sensors used in fingerprint readers allow them to be built into computer keyboards, mice, PDAs, tablet PCs, and notebook computers. They function in much the same way as the stand-alone readers: When you set up the device, you have to "register" a finger (or several fingers), after which you can associate your fingerprints with your logins and accounts.

Data storage

A special breed of reader combines fingerprint recognition with data storage in the form of a USB flash drive. These drives work like conventional readers, but also encrypt the data stored on them. Your sensitive files are essentially inaccessible if your drive happens to fall into the wrong hands, as they can only be unlocked with your fingerprint. Popular drive brands include Kangaru, SanDisk, and BioStik.

Ken Doyle is a principal consultant for Loquent LLC, a Madison-based company that offers technology training and consulting services.

Resources

Printable format

E-mail this story

Index of advertisers

Directory