AuthenticationWorld.com

Digital Fingerprints vs. Fingerscans

Most people are unaware that there are great differences in biometrics.  For example, consider the differences between digital fingerprints versus digital fingerscans.

In a digital fingerprint often all ten fingers are "rolled" through a digital scanner.  With each finger roll, the digitization process digitizes the entire fingerprint including all areas of each fingerprint friction ridge and furrows.  The digitized information is large and is critical in being used to accurately defining the certainty of the identity of the individual.

In fingerscans, often only one or two fingers are used.  Further, the fingers are not usually rolled.  The individual merely places their finger on the scanner.  Further, not all areas of the digitized finger are used.  Normally, the finger scanner takes only certain points on the finger and then compares this quickly to its database to match up to a scan made during the initial registration by the identity.

A fingerscan therefore is much less accurate at verifying the identity of the individual than a fingerprint.  Remember that authentication is the process of verifying the identity measured against risk.  The risk to the enterprise is relatively low for a shopper having a fingerscan done to automatically check out at a till if their fingerscan, for some reason, matches that of another.  However, if the identity is trying to transfer $700 million dollars, then the high risk warrants a more accurate authentication of the identity.  This must include other authentication mechanisms beyond a biometric.

NOTE THAT A FINGERPRINT OR A FINGERSCAN IS NOT A SECRET!  Common authentication best practice for medium to high risk situations is to require multi-factor authentication.  This usually means asking the user a secret question only they know the answer to, the presentation of a biometric and possibly the presentation of a smartcard.

Finally note that all fingerscanners are not equal. Many older devices are relatively easily fooled by rubber impressions made with the identity's fingerprint.  Today, many of the newer fingerscanner models use heat and capacitive sensors to ensure that the fingerprint is made by a real person.

Biometrics - Iris

Password Authentication Single Sign On Authentication Access Control Authentication Authentication-Enterprise Security Authentication Strength Authentication Transaction
Authentication Management User Authentication Authentication Federation Biometric Authentication PKI Authentication Token Authentication Wireless Authentication Document Authentication Authentication - Outsourcing