As experts in device security, this month we wanted to explore the buzzword everyone’s been talking about – Biometric Security.
So let’s start with the basics – biometric authentication.
Biometric authentication is a type of security that uses physical or biological features in order to verify an individual trying to access a device. The most common example of this is Touch ID on your smartphone – this operates by measuring your fingerprint and if it matches the fingerprint of the approved user, access is granted. Fingerprint scanners are currently the most commonly utilised biometric authentication technology. Other common forms of biometric authentication can be:
The last few years have seen a particular development in biometric security within the banking and finance industry. Whilst contactless payments have undoubtedly forefronted the recent advances within payment technology, it is undeniable that security concerns are still rife. For example, the possibility of stolen or lost credit cards poses the threat of card fraud, whilst intercepted transactions could potentially allow a hacker to gain access to cardholder information.
It is perhaps primarily due to these common security concerns surrounding contactless payments that fingerprint biometric cards have recently begun to rise in popularity. With banking giants such as NatWest trialling their first fingerprint card in 2019, biometric payment methods are set to make a surge in the financial industry, transforming their services and security.
Today, there are approximately 21 banks worldwide that are trialling contactless biometric payment cards. These cards look the same as any other bank card, but have a small biometric fingerprint scanner built in. This essentially means that when the user goes to make a card transaction, the fingerprint gets scanned rather than the user entering a PIN. If the fingerprint is recognised as a match, then the payment is authorised. Ultimately, the fingerprint scanner is replacing the PIN and signature authentication typically used with credit cards; this provides greater security, whilst also maintaining the convenience associated with contactless transactions.
It has been occasionally reported that scanners for biometric data are not always accurate, resulting in the possibility that a legitimate user could fail the authentication and get locked out of the device or be refused at the point of sale.
There is also the fear surrounding fingerprint cloning after hackers in the X-Lab security research team demonstrated they were able to beat any fingerprint scanner using equipment costing £108 and an app that analysed a photograph of your fingerprint. The additional concern with this is that if your biometric data did get compromised, there is no option to reset, unlike a hacked password.
Privacy advocates have expressed concerns that biometric security would create an opportunity to collect personal data without consent and even allow identity theft if databases of personal information became compromised.
The answer, of course, is a two-factor or multi-factor authentication strategy. The powerful combination of passwords and physical features for verification creates a layered level of protection to secure your devices and make them less vulnerable to data breaches. We would recommend Microsoft’s Multi-Factor Authenticator to secure any app and protect your identities.
The implementation of widespread biometric security across all industries has the potential to combine high-level security with user convenience. Using the banking sector as an example, it is the ideal opportunity to avoid spending limits and fears of card fraud whilst preserving the accessibility and hygiene of contactless transactions. This is significant and much-needed progress for the digital transformation of the finance sector, and as experts in cyber security, we can’t wait for the future of contactless.
Ultimately, biometric technology offers an undeniably secure solution to cyber security, as relying on static passwords is a risky and outdated strategy. Despite highlighting certain risks, biometric security increases your protection as it is much harder to steal your physical characteristics than it is a password or access card. Combining this with another form of authentication creates a robust layer of security for any device. Executive Vice President at Mastercard, Bob Reany, stated,
“Feeling confident that your information is protected is paramount. Biometrics are more secure, more trusted and better suited to a world that requires more frequent authentication.”
