To: Rob S. who wrote (136 ) 12/8/1998 3:51:00 PM From: David Read Replies (2) | Respond to of 384
Rob, While I'm not an engineer, I don't think you have fully understood how Identix bio-ID works. To begin with, IDX now owns two different systems. Its original system is non-minutiae, pattern recognition. It is not imaged-based, it is incompatible with law enforcement data bases, and it is encrypted at the CPU-peripheral level. The resulting template (not an image) can be stored on the peripheral, on the PC, or on a networked server. The system does not do a one:many algorithm, as your centralized data base scheme suggests. Instead, it provides a one:one authentication. The IDX F3 technology -- its newest stuff in this line -- is set up to work with public key/private key digital certificates, so the template can be transported on a smart card across all platforms. Because of the CPU-based peripheral, F3 technology is more private and more distributed than almost all the rest of the competition. (I think one or two competitors, like the Sony Puppy, are also CPU-based.) Because of the power of the CPU-based unit, there is false finger detection capacity in this technology. In fact, Identix has identified itself with the proposed legislation in California to protect biometric privacy, figuring the company's technology gives it a competitive advantage in this arena, as well as getting on the side of the angels in the public debate. As to the acquired Identicator technology, this is minutiae-based, but also a one:one authentication algorithm. It stores templates (again, not an image) off-peripheral, either on the host PC or a server. That means the device itself is cheaper, since it doesn't have a CPU onboard. Under Compaq's system, the user ID's himself in the sign-on, and then authenticates only with a fingerscan to the server. Identity should not be compromised by provision of the template to the server, although I agree security is highest if the template resides in the peripheral itself. If you look on the Internet long enough, you will see opposition to the technology that has resulted in occasional rejections (I think this happened in Georgia or Alabama), but not any level of real understanding of privacy protections or identity loss. The only centralized database that I'm aware of is the FBI AFIS database used by various police departments, and for some civilian criminal background checks. The bio-ID technology you are discussing is not compatible with that database. Consequently, neither Identix nor any other bio-ID company that I know of uses a technology that "require[s] a central finger print repository or other non-revocable logging of identity." As to accuracy levels, I am sure that Delsecur is providing theoretical, rather than real world, answers. As to markets, that's why everyone is in this business. They are all going after the same markets. By the way, today's announcement of BioAPI taking in its main API competitor, BAPI, implies a speeding up of the standardization of this field. Right now, I'd think that Delsecur could use all the delay among the competition it could get, so that earlier competitors aren't able to get established very quickly.