Fingerprint biometrics eliminate password security risks

(02/05/2007)

Security experts tell us to start by identifying the weakest links in our systems, and to work on improving the security of those elements to mitigate risk. For many, password authentication is the weakest link in the security infrastructure. Passwords only work if individuals use them correctly, all the time. Despite countless hours in creating guidelines, procedures and purchased safeguards, one user can still override an IT Department’s efforts by simply sharing a password.

The “human” element often results in a number of common password problems.
· Too many passwords to remember: The typical user now has more than 21 passwords, and has two strategies to cope, neither of which is advisable from a security standpoint: they either use common words as passwords or keep written records of them.
· Easy passwords: Users tend to set passwords based on words that they can remember easily, making them easy for hackers to guess. Simple password cracking programs can find many whole word passwords quickly.
· Single passwords for many systems: To avoid remembering many passwords, people often use the same password across many systems – including insecure sites where passwords may be sent in clear text. A single password, once cracked, may open many doors.
· Accessible passwords: Longer passwords containing different kinds of characters are harder to crack. They are also harder to remember, prompting many users to write them down - often in accessible locations - or call the help desk for forgotten passwords.

As companies constantly look for the best way to secure corporate assets, they are turning to fingerprint authentication to replace passwords, smart cards, tokens and PINs. Unlike these other authentication methods, fingerprints provide a unique identifier for each person that cannot be lost, stolen or shared.

In fact, fingerprint authentication increases corporate security while maintaining a level of convenience that does not disrupt employee productivity. Fingerprint authentication has now emerged as the gatekeeper for access to enterprise data, applications and networks.

Fingerprint Authentication provides 5 important benefits:
· Secure Authentication: Identity is based on who you are (fingerprint) versus what you know (password)
· Ease of Use: Quick access to data
· Data Breach Compliance: Restricts access, protects data and provides audit trail minimising misuse
· Speed: Users get fast secure access to data
· Quick Return On Investment: Reduces help desk costs and increases productivity

A multitude of different industries are realising the importance of biometrics and identity management as a means to eliminate the risks and costs associated with password security and to help streamline regulatory compliance. Fingerprint authentication solutions can be found in:
· Retail Outlets: Stores are using fingerprint authentication in the front and back-office to create a verifiable user-unique audit trail of employees who access POS terminals and to monitor time and attendance.
· Healthcare: Hospitals and doctors are relying heavily on fingerprint authentication as a means to better secure access to patient records, speed the time-to-application for workers that use multiple applications and eliminate PCs and workstations with centralised multi-user kiosks.
· Financial Markets: Banks are using fingerprint authentication to secure monetary transactions and customer records, improve customer service and provide bank employees with faster and more secure access to multiple databases.

Many PC OEMs are offering new notebook models with embedded fingerprint readers. It is estimated that more than 10M units shipped in 2006 with such technology. With the inclusion of fingerprint readers in notebooks, more and more companies are turning to biometrics and fingerprint-based identity as a means to safeguard access to corporate information, achieve regulatory compliance and lower IT help desk calls.

According to a recent International Biometrics Group study, Biometrics Market and Industry Report 2007-2012 edition, fingerprint revenue is 38% of the total non-AFIS biometrics market.

Article contributed by George Skaff, VP Marketing, DigitalPersona

Related topics:  Biometric Systems   IT Network and Computer Security   Security market sectors 

Print version | Email to a friend | Related articles

Data breaches: Trends, costs and best practices gives you all the latest information on securing personal and corporate data, key recommendations for immediate action to improve data security, and how to respond to data breaches.

Other Security news and resources