Today's management boards face a host of legal and regulatory demands, forcing them to get to grips with the control of their sensitive and critical business data and the behaviour and management of their staff. The result is that companies are looking to technology to provide the answers to two big questions: are people who they say they are; and how can sensitive data remain confidential even if it falls into the wrong hands? A blend of biometrics and quantum cryptography may provide some answers.
Biometrics are measurements of biological characteristics – either physiological or behavioural – that verify the claimed identity of an individual. Ideally, a biometric is what an individual uniquely holds and another human being should not be able to possess. But concerns can arise about copies of raw biometrics data – fingerprint, face or iris – obtained by illegal means. Fortunately, obtaining the data is not enough. The imposter has to present the biometric to the systems as well as fool it.
What makes biometrics successful is not its secrecy but its openness – we all carry them around and show them plainly to each other. If a system includes an "aliveness" test, and is performed in an exposed, supervised area then fingerprints copied onto plastic or faces shown as photographs will be spotted.
Other forms of user authentication – including passwords, tokens and encryption – all depend on protecting a secret or preventing the theft of an object. Once that secret or device is compromised, so is security until a new one can be established. These methods also require the user to hold different secrets with each and every device, which can be a burden.
The global biometrics market is expected to grow rapidly over the next four years, spurred on by the need for tighter security, enabling greater use of automated services, end-user convenience and cost reduction. What is certain is that the role of biometrics is set to change, becoming a more important and intrinsic part of everyday life.
