Risk
8/28/2013
01:35 PM
Dark Reading
Dark Reading
Slideshows
Connect Directly
RSS
E-Mail
50%
50%

Iris Scans: Security Technology In Action

Iris-based security scans are the stuff of sci-fi movies, but NIST research shows how the technology can now be used in the real world to reliably identify individuals.
Previous
1 of 6
Next


Sci-fi films routinely lead viewers to believe that scanning an individual's iris is a proven way to identify them, but in practice, the results haven't always been 100% dependable. One of the most significant challenges isn't the technology, but how slight changes in the structure of the iris can throw off calculations used in comparing images of the human eye.

The long-term stability of the iris' distinguishing characteristics, critical for biometric identification, had come under question when a recent study of several hundred subjects found that iris recognition becomes increasingly difficult over a period of three years, consistent with an aging effect.

The latest in an ongoing series of studies of iris recognition for biometric identification, however, refutes that. Scientists at the National Institute of Standards and Technology (NIST) have found that the unique characteristics of the iris in the average person do not change for at least nine years. The results of the study, conducted by researchers in NIST's Information Access division, suggest that iris recognition of average individuals will remain viable for decades. They also imply that identity program managers may not need to recapture iris images as frequently, which factors into the total overall cost of maintaining iris recognition systems.

The new study by NIST researchers used two large operational data sets, including one of nearly 8,000 recurrent travelers across the Canadian-American border, involving millions of images. The travelers, like the woman pictured here in a photograph supplied by the Canadian Border Services Agency, use an iris identification system to confirm the individuals' identity. The system is part of a joint Canadian and American program to help people move quickly across the border. The study examined images that had been captured at least four years and up to nine years previously. NIST researchers found no evidence of a widespread aging effect.

NIST has been working with a variety of organizations to help improve the use of iris recognition systems. In that vein, it established the Iris Exchange program in 2008. The program has sought to establish standards for iris recognition, as well as the development and deployment of systems used to capture and identify iris images. Sponsors of the program include the FBI's Criminal Justice Information System Division and the Office of Biometric Identity Management in the Department of Homeland Security.

Previous
1 of 6
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
WKash
50%
50%
WKash,
User Rank: Apprentice
9/3/2013 | 5:27:27 PM
re: Iris Scans: Security Technology In Action
The Canadian Border Services Agency and DHS deserve credit for putting iris recognition systems to the test in the field and sharing the data on how reliable the systems are.
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading, September 16, 2014
Malicious software is morphing to be more targeted, stealthy, and destructive. Are you prepared to stop it?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-5316
Published: 2014-09-21
Cross-site scripting (XSS) vulnerability in Dotclear before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted page.

CVE-2014-5320
Published: 2014-09-21
The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application.

CVE-2014-5321
Published: 2014-09-21
FileMaker Pro before 13 and Pro Advanced before 13 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2319...

CVE-2014-5322
Published: 2014-09-21
Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-3640.

CVE-2014-6602
Published: 2014-09-21
Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the Green Call Option.

Best of the Web
Dark Reading Radio