We use analytics cookies.We use cookies to analyze site traffic and improve your experience.
Loading...
System Design Masterclass · Security Architecture
Free preview: the first 2 parts of this 5-part lesson.
Already bought the course? Sign in to read the whole lesson.
this lesson is part of
System Design Masterclass
Unlock this lesson and the 751 other paid lessons
$25 once, by PayPal
See the System Design courseread the rest of this lesson in
System Design Masterclass
Unlock this lesson and the 751 other paid lessons
$25 once, by PayPal
See the System Design coursein Security Architecture
This lesson is part of the full System Design Masterclass. Unlock it along with 769 other lessons for a one-time payment.
One-time payment by card or PayPal
Get Lifetime AccessOne-time payment: UPI, card or netbanking
Get Lifetime Access18 Foundation lessons are free, no payment needed. Try them now
It is easy and good
“It is really nice and good Please join the course”
Passwords can be changed. Tokens can be revoked. But your fingerprint is permanent. If a biometric database is breached, you cannot issue new fingerprints. This is both the greatest strength and the greatest vulnerability of biometric authentication.
In 2015, the US Office of Personnel Management (OPM) breach exposed 5.6 million fingerprint records of federal employees and contractors. Those fingerprints are compromised forever. No password reset button exists for a human body.
Biometric auth uses something you are, your fingerprint, face geometry, iris pattern, or voice, to verify identity. It is convenient (you always have your fingers), hard to share (you cannot email your retina), and increasingly ubiquitous (every modern phone has a fingerprint sensor or face scanner). Apple's Face ID processes 30,000 infrared dots to map your face and achieves a false acceptance rate of 1 in 1,000,000, compared to 1 in 50,000 for a 4-digit PIN.
But biometrics should never be the sole authentication factor. They are a strong supplement to other methods, not a replacement.
Different biometric methods vary wildly in accuracy, spoofability, and appropriate use cases.
Fingerprint sensors are the most common biometric. Capacitive sensors (like on phones) measure the tiny electrical differences between ridges and valleys. Optical sensors (like on door locks) take a photograph. Ultrasonic sensors (Samsung Galaxy S10+) use sound waves for 3D mapping. False acceptance rates hover around 1 in 50,000, but silicone molds have fooled capacitive sensors in lab conditions.
3D face recognition (Apple Face ID, Windows Hello) projects thousands of infrared dots to create a depth map. This defeats photo attacks that fool 2D cameras. Face ID's 1-in-1,000,000 false acceptance rate drops for identical twins and children under 13 whose facial features are still developing.
Iris scanning has the lowest false acceptance rate of any mainstream biometric, roughly 1 in 1,200,000. It is used at border crossings, military facilities, and India's Aadhaar system (which enrolled 1.3 billion iris patterns). The challenge is user acceptance: people find iris scanners intrusive.
Voice recognition is convenient for phone banking and smart assistants but is the most vulnerable to spoofing. Deepfake voice synthesis tools can now clone a voice from 3 seconds of audio. Voice should never be a sole factor.