Information Security: Challenges in Using Biometrics

• NCJ Number: 203833
• Author(s): Keith A. Rhodes
• Date Published: September 2003
• Length: 27 pages
• Corporate Author: US Government Accountability Office
• Sale Source: US Government Accountability Office
• Publication Format: Document (Online)
• Publication Type: Report (Study/Research)
• Language: English
• Country: United States of America
• Note: Testimony before the Subcommittee on Technology, Information Policy, Intergovernmental Relations, and the Census, Committee on Government Reform, House of Representatives. Downloaded on January 23, 2004.

Annotation

This report provides an overview of currently available biometric technologies, current uses of these technologies and issues and challenges associated with the implementation of biometrics, specifically within the Federal Government.

Abstract

Biometrics are technologies that can automate the identification of people by one or more of their distinct physical or behavioral characteristics. Leading biometric technologies include facial recognition, fingerprint recognition, hand geometry, iris recognition, retina recognition, signature recognition, and speaker recognition. Biometric technologies have been used in Federal applications that include: access control, criminal identification, and border security. Recently, laws have been passed that well require a more extensive use of biometric technology in the Federal Government. In this report conducted by the U.S. General Accounting Office, the use of biometrics in the Federal Government is examined, as well as the current state of biometrics. Before a decision can be made to design, develop, and implement biometrics into a security system, three key considerations need to be addressed: (1) decisions must be made on how the technology will be used; (2) a detailed cost-benefit analysis must be conducted to determine that the benefits gained outweigh the costs; and (3) a trade-off analysis must be conducted between the increased security due to biometrics and the effect on areas such as privacy and convenience. Federal agencies should consider a risk management approach to help identify and address security concerns. In addition, Federal agencies need to define what the high-level goals of a security system with biometrics will be and develop the concept of operations. The biometric technologies are available today that can be used in security systems to help protect assets however, technology and people must work together as part of an overall security process.