Link to home
Start Free TrialLog in
Avatar of Rohit Bajaj
Rohit BajajFlag for India

asked on

Which biometric system is best for University campus IT department

HI,
There are the following biometric schemes
1) Fingerprint recognition
2) Voiceprint recognition
3) Iris recognition
4) Facial recognition

Which one would be the best one to go for? And what arguments we can make for the pros/cons of each.
As per my understanding
The fingerprint could be spoofed.
voice - could depend upon various circumstances and is not reliable as there may be other noise presents
Iris seems to be the best choice and probably it won't require that much data storage too.

Any thoughts on this?
Thanks
ASKER CERTIFIED SOLUTION
Avatar of Kimputer
Kimputer

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Biometrics are not security.  They're more for identity, and not as accurate and secure as they pretend to be.  What exactly are you needing it for?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Biometrics are only useful as a 3rd factor.  They should never be the sole factor.  It's a scam if they are.

Avatar of Rohit Bajaj

ASKER

Just to clarify this is more of academic assignment stuff. I am reading up and learning about System Security.
So like the exact question is -
1) Identify the four most important criteria against which a biometric system could be assessed. And access the 4 systems as per the criteria.
2) Considering that it has to be put in a university there will be a diverse population. Identify why the use of specific biometrics may be unwelcome or inappropriate for some staff and students.

They are more subjective questions. I am thinking over it and just want expert tips on it. Discussing helps.

Like the 2) one That sounds initially weird. I couldn't think of a valid or strong reason that a particular biometric could be inappropriate for staff/students.

For 1)
The simple thing is the standard set of criteria :
Universality – every person should have the characteristic
Uniqueness – no two persons should be the same in terms of the characteristics
Permanence – the characteristics should not change over time.
Collectability – the characteristics can be measured quantitatively

Probably the above are too general criteria and are more for biometric systems in general.
For example, in case the criteria could be
1) cost
2) ease of implementation
3) The characteristics should not change over time  (Like the voice one is particular fails this)
4) Authenticity
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
There's a difference between identity and security.  Don't confuse the two concepts.

The only thing biometrics are useful for is to track and identify and individual.  The fantasy of security was from sci-fi, and as year progressed, we know it's not valid as a security measure.  Any research into biometrics will only be used for eroding privacy, until laws catch up to prevent that.  Stop calling it security, because we know it's not secure.

It can only be used for identity because you can't change your biometric markers, at least not easily, without some sort of maiming or marring of your body.  This means if your identity is ever compromised, you have no way to reset or change it.  It can't be used for security at all, only for identity when you include other actual security measures.

Stop including biometrics under any category of security.  It's not secure in any real way.
This means if your identity is ever compromised, you have no way to reset or change it.  It can't be used for security at all, only for identity when you include other actual security measures.
This is why I use my elbow for entry to Disney properties that want your fingerprint.
Now that you've told everyone, people know which part of your body to steal.  If you're going to use some other part, don't tell people about it.

I refuse to use my fingerprint, face, DNA or other identifying information for access, because it's not something you can easily change or hide from someone that might want to steal it.

Anyone that's still using any form of biometrics as "security" has a complete and utter lack of understanding of security, and need to stop watching stupid movies.