ConFoo Vancouver 2017 - Biometrics: Fantastic Failure Point of the Future

@adam_englander
Biometrics: Fantastic Failure
Point of the Future
Adam Englander, iovation
@adam_englander

@adam_englander
History of Biometrics

@adam_englander
Fingerprint used to prevent forgery
2000 BC

@adam_englander
Fingerprints used to solve crimes
As early as 650 AD

@adam_englander
Fingerprint Identiﬁcation
Mid 1800’s

@adam_englander
Voice Recognition
1960s

@adam_englander
Retina/Iris Scan
1980s

@adam_englander
Facial Recognition
2000’s

@adam_englander
What’s The Problem?

@adam_englander
3 billion records
2014

@adam_englander
78.8 million records
2015

@adam_englander
21.5 million records
2015

@adam_englander
57 Million Records
2016

@adam_englander
143 Million Records

@adam_englander
Biometrics are more valuable than passwords over time

@adam_englander
Password lists drop in value quickly
Early Yield
0
25
50
75
100

@adam_englander
Biometrics will increase in value over time
Long Haul
0
75
150
225
300
Password Encrypted Biometric Plain Biometric

@adam_englander
Biometrics must be better
protected than passwords

@adam_englander
Knowledge based entropy a.k.a. Private Biometrics

@adam_englander
Obfuscate the relationship to the biometric
Hash the link with a knowledge item

@adam_englander
Password vs Biometric Value
Long Haul
0
125
250
375
500
Year 0 Year 5 Year 10 Year 20 Year 50
Password Biometric

@adam_englander
Decentralized Biometric Stores

@adam_englander
Which brings us back to…

@adam_englander
Decentralized Biometric Store
Mobile devices as secure stores on the periphery

Recomendados