👤 Chapter 6: Biometric Authentication

6.1 Why Biometrics?

Biometric authentication uses your physical or behavioral characteristics to verify identity. Unlike passwords (something you know) or security tokens (something you have), biometrics are something you are—they can't be forgotten, shared, or easily stolen.

In digital identity systems, biometrics solve critical problems:

• Binding: Link digital identity to a real person
• Convenience: No passwords to remember
• Security: Difficult to forge or steal
• Liveness: Confirm a real person is present, not a photo or video

6.2 Types of Biometrics

6.2.1 Fingerprint Recognition

How it works: Captures unique ridge patterns on fingertips

Accuracy: Very high (False Accept Rate < 0.001%)

Pros: Mature technology, fast, widely deployed, low cost

Cons: Can be affected by injuries, skin conditions, dirt

Use cases: Phone unlocking, border control, employee access

6.2.2 Facial Recognition

How it works: Analyzes facial geometry, distances between features, texture

Accuracy: High (95-99% in good conditions)

Pros: Contactless, convenient, works with existing cameras

Cons: Lighting sensitive, can be spoofed without liveness detection

Use cases: Phone unlock, airport boarding, payment authentication

6.2.3 Iris Recognition

How it works: Scans unique patterns in the colored ring around the pupil

Accuracy: Extremely high (FAR < 0.00001%)

Pros: Most accurate biometric, stable over lifetime

Cons: Requires specialized hardware, can be uncomfortable for users

Use cases: High-security facilities, national ID programs, border control

6.2.4 Voice Recognition

How it works: Analyzes vocal characteristics, pitch, rhythm, accent

Accuracy: Moderate (85-95%)

Pros: Remote verification possible, natural interaction

Cons: Background noise interference, voice changes (illness, age)

Use cases: Phone banking, voice assistants, call center authentication

6.2.5 Behavioral Biometrics

Types: Typing rhythm, mouse movements, gait analysis, signature dynamics

Accuracy: Varies (70-90%)

Pros: Continuous authentication, hard to mimic, no special hardware

Cons: Lower accuracy, affected by environment and mood

Use cases: Fraud detection, continuous monitoring, account security

6.3 Biometric Performance Metrics

6.4 Liveness Detection

Critical for preventing spoofing attacks where attackers use photos, videos, or masks to impersonate someone:

6.4.1 Active Liveness

Requires user cooperation:

• Blink detection: Ask user to blink
• Head movement: Turn left, right, nod
• Challenge-response: "Say random number" or "Smile"

Pros: Effective against basic attacks

Cons: Poor user experience, time-consuming

6.4.2 Passive Liveness

Works automatically without user action:

• Texture analysis: Detect screen pixels vs real skin
• Depth sensing: 3D cameras detect flat photos
• Micro-expressions: AI detects subtle facial movements
• Blood flow: Detect pulse in facial capillaries

Pros: Better UX, faster

Cons: More complex, requires advanced sensors/AI

6.5 Privacy-Preserving Biometrics

Storing raw biometric data creates massive privacy risks. Solutions include:

6.5.1 Template Protection

Instead of storing raw biometrics, store irreversible mathematical templates:

• Extract features from biometric (e.g., fingerprint minutiae points)
• Apply one-way transformation
• Store transformed template, discard original
• Authentication compares templates, not raw data

6.5.2 Cancelable Biometrics

Generate multiple templates from single biometric using different keys:

• Use key K1 for bank → Template1
• Use key K2 for employer → Template2
• If template compromised, generate new one with different key
• Cannot link templates across services

6.5.3 On-Device Processing

Process biometrics locally, never send to server:

• Capture biometric on phone
• Match against stored template on device
• Send only "match/no match" result
• Raw biometric never leaves device

6.6 Multimodal Biometrics

Combine multiple biometric types for higher security and accuracy:

• Face + Voice: Video call authentication
• Fingerprint + Face: High-security access
• Iris + Fingerprint: National ID programs
• Behavioral + Physiological: Continuous authentication

Benefits: Higher accuracy, harder to spoof, backup if one fails

Challenges: More complex, slower, cost

6.7 Biometrics in Digital Identity Workflows

6.7.1 Enrollment

1. User presents physical ID document
2. System captures biometric (face, fingerprint)
3. Liveness detection ensures real person present
4. Link biometric template to DID/credential
5. Store template securely (encrypted, on-device, or protected)

6.7.2 Authentication

1. User initiates login/transaction
2. System requests biometric
3. Capture biometric with liveness check
4. Compare to stored template
5. If match, proceed; if not, fallback or deny

6.7.3 Credential Binding

Biometrics bind digital credentials to physical persons:

• Issue credential with biometric template
• During presentation, verify holder's biometric matches template
• Prevents credential sharing or theft
• Crucial for high-value credentials (government ID, financial)

6.8 Regulatory and Ethical Considerations

6.8.1 Legal Frameworks

• GDPR (Europe): Biometrics are "special category" data requiring strict protection
• CCPA (California): Biometric information requires consumer disclosure
• BIPA (Illinois): Strictest law—requires written consent, prohibits sales

6.8.2 Ethical Issues

• Consent: Must be truly informed and voluntary
• Bias: Some systems show racial/gender bias—requires diverse training data
• Surveillance: Face recognition enables mass surveillance—needs regulation
• Immutability: Can't change your face if compromised—need revocation mechanisms

6.9 Best Practices

• Never store raw biometrics: Use protected templates
• Always use liveness detection: Prevent spoofing
• Implement fallbacks: Alternative auth if biometric fails
• Regular updates: Re-enroll periodically as biometrics change
• Transparency: Clearly communicate what's collected and how it's used
• Encryption: Protect biometric data in transit and at rest
• Access controls: Limit who can access biometric systems