Biometric Factor

Full Title or Meme

Biometric Attributes of the biologic phenotype of a User may be used to Identify that user.

Context

• Biometric Attributes are taken to be exclusively the measure of human characteristics like fingerprint, facial and behavior patterns.
• The human characteristics are another factor that can be a part of Multi-factor Authentication.
• So the human characteristics can be considered to be a Credential.
• The measurements of the characteristic are compared against a template of the characteristics using some Assurance level to produce a Validated claim.

Problems

• Biometric Attributes attached to official documents may inadvertently become Biometric Identifiers which invade the user's privacy. See the wiki page Biometric Identifier for user cases where that has damaged a user's life.
• In a case described in the New York Times Magazine an emigrant from Haiti had her fingerprints taken on several occasion while applying for citizenship. One of those forms was used to apply for citizenship for a differently named person. When that case was abandoned, a judge issues a deportation order. The emigrant was later granted citizenship. Many years later the government digitalized all the fingerprint records, found the fraudulent earlier application and used the fingerprints on the fraudulent form to charge with new citizen with a felony in spite of no evidence that she had filed the fraudulent form.

Solutions

• ISO 30107-3:2017 describes testing of Biometric Attribute presentations.
• The first Level 1 rating in the NIST/NVLAP-certified iBeta Presentation Attack Detection (PAD) Certification test was granted on (2018-09-23) to facetec