Featured Research

from universities, journals, and other organizations

On-card Fingerprint Match Is Secure, Speedy

Date:
April 3, 2008
Source:
National Institute of Standards and Technology
Summary:
A fingerprint identification technology for use in Personal Identification Verification cards that offers improved protection from identity theft meets the standardized accuracy criteria for federal identification cards.

Tests show that wireless data transmission from a fingerprint reader to a match-on-card can be secure.
Credit: Talbott/NIST

A fingerprint identification technology for use in Personal Identification Verification (PIV) cards that offers improved protection from identity theft meets the standardized accuracy criteria for federal identification cards according to researchers at the National Institute of Standards and Technology (NIST).

Under Homeland Security Presidential Directive 12 (HSPD 12), by this fall most federal employees and contractors will be using federally approved PIV cards to "authenticate" their identity when seeking entrance to federal facilities. In 2006 NIST published a standard* for the new credentials that specifies that the cards store a digital representation of key features or "minutiae" of the bearer's fingerprints for biometric identification.

Under the current standard, a user seeking to enter a biometrically controlled access point would insert his or her PIV smart card into a slot--just like using an ATM card--and place their fingers on a fingerprint scanner. Authentication proceeds in two steps: the cardholder enters a personal identification number to allow the fingerprint minutiae to be read from the card, and the card reader matches the stored minutiae against the newly scanned image of the cardholder's fingerprints.

In recent tests,** NIST researchers assessed the accuracy and security of two variations on this model that, if accepted for government use, would offered improved features. The first allows the biometric data on the card to travel across a secure wireless interface to eliminate the need to insert the card into a reader. The second uses an alternative authentication technique called "match-on-card" in which biometric data from the fingerprint scanner is sent to the PIV smart card for matching by a processor chip embedded in the card. The stored minutiae data never leave the card. The advantage of this, as computer scientist Patrick Grother explains, is that "if your card is lost and then found in the street, your fingerprint template cannot be copied."

The NIST tests addressed two outstanding questions associated with match-on-cards. The first was whether the smart cards' electronic "keys" can keep the wireless data transmissions between the fingerprint reader and the cards secure and execute the match operation all within a time budget of 2.5 seconds. The second question was whether the "match-on-card" operation will produce as few false acceptance and false rejection decisions as traditional match-off-card schemes where more computational power is available.

The researchers found that 10 cards with a standard 128-byte-long key and seven cards that use a more secure 256-byte key passed the security and timing test using wireless. On the accuracy side, one team met the criteria set by NIST and two others missed narrowly. The computer scientists plan a new round of tests soon to allow wider participation. For copies of the test report and details of the next test round, see the MINEX (Minutiae Interoperability Exchange Test) Phase II Web pages.

NIST has been at the forefront of security and biometric research and standardization for decades. Prior NIST work, in 2005, quantified the speed versus accuracy tradeoffs associated with storing an individual's fingerprint minutiae rather than the full fingerprint images on PIV cards. These studies were funded by NIST and the Department of Homeland Security's Science and Technology Directorate.

* Federal Information Processing Standard (FIPS) 201-1, Personal Identity Verification (PIV) of Federal Employees and Contractors. March, 2006.

** P. Grother, W. Salamon, C. Watson, M. Indovina and P. Flanagan. MINEX II--Performance of Fingerprint Match-on-Card Algorithms, Phase II Report. NIST Interagency Report 7477, Feb. 29, 2008.


Story Source:

The above story is based on materials provided by National Institute of Standards and Technology. Note: Materials may be edited for content and length.


Cite This Page:

National Institute of Standards and Technology. "On-card Fingerprint Match Is Secure, Speedy." ScienceDaily. ScienceDaily, 3 April 2008. <www.sciencedaily.com/releases/2008/04/080402100005.htm>.
National Institute of Standards and Technology. (2008, April 3). On-card Fingerprint Match Is Secure, Speedy. ScienceDaily. Retrieved July 30, 2014 from www.sciencedaily.com/releases/2008/04/080402100005.htm
National Institute of Standards and Technology. "On-card Fingerprint Match Is Secure, Speedy." ScienceDaily. www.sciencedaily.com/releases/2008/04/080402100005.htm (accessed July 30, 2014).

Share This




More Matter & Energy News

Wednesday, July 30, 2014

Featured Research

from universities, journals, and other organizations


Featured Videos

from AP, Reuters, AFP, and other news services

Britain Testing Driverless Cars on Roadways

Britain Testing Driverless Cars on Roadways

AP (July 30, 2014) British officials said on Wednesday that driverless cars will be tested on roads in as many as three cities in a trial program set to begin in January. Officials said the tests will last up to three years. (July 30) Video provided by AP
Powered by NewsLook.com
China's Drone King Says the Revolution Depends on Regulators

China's Drone King Says the Revolution Depends on Regulators

Reuters - Business Video Online (July 30, 2014) Comparing his current crop of drones to early personal computers, DJI founder Frank Wang says the industry is poised for a growth surge - assuming regulators in more markets clear it for takeoff. Jon Gordon reports. Video provided by Reuters
Powered by NewsLook.com
3Doodler Bring 3-D Printing to Your Hand

3Doodler Bring 3-D Printing to Your Hand

AP (July 30, 2014) 3-D printing is a cool technology, but it's not exactly a hands-on way to make things. Enter the 3Doodler: the pen that turns you into the 3-D printer. AP technology writer Peter Svensson takes a closer look. (July 30) Video provided by AP
Powered by NewsLook.com
Climate Change Could Cost Billions, According To White House

Climate Change Could Cost Billions, According To White House

Newsy (July 29, 2014) A report from the White House warns not curbing greenhouse gas emissions could cost the U.S. billions. Video provided by Newsy
Powered by NewsLook.com

Search ScienceDaily

Number of stories in archives: 140,361

Find with keyword(s):
Enter a keyword or phrase to search ScienceDaily for related topics and research stories.

Save/Print:
Share:

Breaking News:
from the past week

In Other News

... from NewsDaily.com

Science News

Health News

    Environment News

    Technology News



      Save/Print:
      Share:

      Free Subscriptions


      Get the latest science news with ScienceDaily's free email newsletters, updated daily and weekly. Or view hourly updated newsfeeds in your RSS reader:

      Get Social & Mobile


      Keep up to date with the latest news from ScienceDaily via social networks and mobile apps:

      Have Feedback?


      Tell us what you think of ScienceDaily -- we welcome both positive and negative comments. Have any problems using the site? Questions?
      Mobile: iPhone Android Web
      Follow: Facebook Twitter Google+
      Subscribe: RSS Feeds Email Newsletters
      Latest Headlines Health & Medicine Mind & Brain Space & Time Matter & Energy Computers & Math Plants & Animals Earth & Climate Fossils & Ruins