RE: CDSA-biometrics

From: Ken Pfeil (Kenat_private)
Date: Thu Jun 28 2001 - 12:09:14 PDT

  • Next message: Giorgio Zoppi: "Re: Principle of Inclusion?"

    > Just one more:
    > You can't revoke a biometric key. If a BadGuy(tm) gets a
    > hold of the digital representation of, say, your finger- he
    > might be able to impersonate you. And poor you, you
    > can't revoke your finger, right?
    >
    > Best Regards,
    >
    > Yonatan Bokovza
    > IT Security Consultant
    > Xpert Systems
    
    You can revoke the enrollment of the fingerprint simply by clearing the
    captured template from the
    storage directory. I'd be more worried about someone getting hold of my
    social security number than I would
    fingerprint template that SHOULD be detected as a replay attack anyway...
    
    My .002
    Ken
    



    This archive was generated by hypermail 2b30 : Fri Jun 29 2001 - 13:19:10 PDT