Risk
8/28/2013
01:35 PM
Dark Reading
Dark Reading
Slideshows
Connect Directly
RSS
E-Mail
50%
50%

Iris Scans: Security Technology In Action

Iris-based security scans are the stuff of sci-fi movies, but NIST research shows how the technology can now be used in the real world to reliably identify individuals.
Previous
1 of 6
Next


Sci-fi films routinely lead viewers to believe that scanning an individual's iris is a proven way to identify them, but in practice, the results haven't always been 100% dependable. One of the most significant challenges isn't the technology, but how slight changes in the structure of the iris can throw off calculations used in comparing images of the human eye.

The long-term stability of the iris' distinguishing characteristics, critical for biometric identification, had come under question when a recent study of several hundred subjects found that iris recognition becomes increasingly difficult over a period of three years, consistent with an aging effect.

The latest in an ongoing series of studies of iris recognition for biometric identification, however, refutes that. Scientists at the National Institute of Standards and Technology (NIST) have found that the unique characteristics of the iris in the average person do not change for at least nine years. The results of the study, conducted by researchers in NIST's Information Access division, suggest that iris recognition of average individuals will remain viable for decades. They also imply that identity program managers may not need to recapture iris images as frequently, which factors into the total overall cost of maintaining iris recognition systems.

The new study by NIST researchers used two large operational data sets, including one of nearly 8,000 recurrent travelers across the Canadian-American border, involving millions of images. The travelers, like the woman pictured here in a photograph supplied by the Canadian Border Services Agency, use an iris identification system to confirm the individuals' identity. The system is part of a joint Canadian and American program to help people move quickly across the border. The study examined images that had been captured at least four years and up to nine years previously. NIST researchers found no evidence of a widespread aging effect.

NIST has been working with a variety of organizations to help improve the use of iris recognition systems. In that vein, it established the Iris Exchange program in 2008. The program has sought to establish standards for iris recognition, as well as the development and deployment of systems used to capture and identify iris images. Sponsors of the program include the FBI's Criminal Justice Information System Division and the Office of Biometric Identity Management in the Department of Homeland Security.

Previous
1 of 6
Next
Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
WKash
50%
50%
WKash,
User Rank: Apprentice
9/3/2013 | 5:27:27 PM
re: Iris Scans: Security Technology In Action
The Canadian Border Services Agency and DHS deserve credit for putting iris recognition systems to the test in the field and sharing the data on how reliable the systems are.
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3352
Published: 2014-08-30
Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability," aka Bug ID CSCuh...

CVE-2014-3908
Published: 2014-08-30
The Amazon.com Kindle application before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2010-5110
Published: 2014-08-29
DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file.

CVE-2012-1503
Published: 2014-08-29
Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section.

CVE-2013-5467
Published: 2014-08-29
Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server (ms) and Shared Libraries (ax) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP08, 6.2.3 through FP01, and 6.3.0 through FP01 in IBM Tivoli Monitoring (ITM)...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
This episode of Dark Reading Radio looks at infosec security from the big enterprise POV with interviews featuring Ron Plesco, Cyber Investigations, Intelligence & Analytics at KPMG; and Chris Inglis & Chris Bell of Securonix.