Measurements of human biology – aka biometrics – have long been considered the most secure form of personal identification. Fingerprints, the eye’s iris patterns, and DNA coding are unique to each person. Security researchers and academia have touted biometrics as the ultimate replacement for password-based authentication.
Unlike government-issued identification numbers or employee access cards that can be disabled and reissued, our personal biomarkers cannot be replaced. So long as biometric records are kept separate from personally identifiable information (PII), the authentication process is considered secure. With commercial biometrics scanning and authentication systems now possible, the opportunity to secure access to sensitive data stores and facilities has become feasible for more than just government applications.
Some observers said it was only a matter of time before biometrics data was compromised. “You can’t change your fingerprint, or your iris, or your face, the way you can change your social security number or phone number, once it’s compromised,” Jay Stanley a senior policy analyst for the American Civil Liberties…