Security Basics mailing list archives

RE: Biometric Alternatives


From: "Wilcox, Stephen" <StephenWilcox () universalcomputersys com>
Date: Thu, 5 Jun 2003 09:41:21 -0500

At my company we have tested iris, fingerprint, and voice.  I have found the fingerprint scanners and voice are the 
easiest to get around.  Voice naturally with a recording device, the fingerprint scanner was a little harder but 
non-the-less just as easy.  The first way is with a regular clear tape, apply the tape to the scanner, remove, then 
reapply.  This will produce about a 20-30% yield, the second way requires a Teflon finger without prints.  Tap the 
finger on the scanner, and it will think you the last person who used the scanner. This produced a 80-90% yield. Iris 
scanners are harder to trick.  

Steve


-----Original Message-----
From: Mears,Caleb M [mailto:Caleb.M.Mears () business colostate edu]
Sent: Wednesday, June 04, 2003 5:01 PM
To: security-basics () securityfocus com
Subject: Biometric Alternatives


Hello All,

I am currently evaluating different biometric alternatives to our current logon system. I have narrowed my search to 
fingerprint based systems because as most of our "customers" are students, ease of use is a must and iris or voice 
based systems do not seem practical. Keyboards with built-in scanners are preferred because most of the devices I have 
found are small external devices that I imagine will grow legs and walk out the door unless there is a locking 
mechanism included with the device. I am looking for something that will work in conjunction with our current Windows 
XP workstations and Windows 2000 server w/ Active Directory; however, we will be migrated over to Windows 2003 server 
by the end of the summer so compatibility with 2003 server is a must. The purpose of this project is to provide the 
students with an alternative to remembering their password and provide quicker logon times. Any good/bad experiences 
with vendors are appreciated.

Caleb


----------------------------------------
The information transmitted in this message is intended only for the person or entity to whom it is addressed and may 
contain confidential and/or privileged material.  Any review, retransmission, dissemination or other use of, or taking 
of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. 
 If you received this in error, please contact the sender and destroy any copies of this document.

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: