Using 'body language' to secure networks

By Ellen Messmer
Network World, 5/4/98

Carlisle, Pa. - Biometric security devices can be used to guard network access by checking a user's fingerprints, eyes, voice or other physical traits instead of a simple password. But the relative novelty of using biometric products to safeguard corporate networks has raised questions about how well the technology actually works.

Last week, the International Computer Security Association (ICSA) gave the technology a boost.

The ICSA, which conducts a wide range of security product tests, gave six biometric products its stamp of approval after they passed a round of rigorous ICSA tests conducted in both laboratory and customer environments.

The six products are:

TrueFace, from Miros, Inc., of Wellesley, Mass. The product is used in automated teller machines in place of bank cards.

Touchstone, from Mytec Technologies, Inc., of Toronto. This fingerprint-matching device is used for secure network access, electronic commerce, e-mail encryption and database management.

NRIdentity, from National Registry, Inc., of Tampa, Fla. The offering can authenticate users logging onto a Windows NT server domain from remote Windows 95 or Windows NT client workstations, or approve electronic documents.

SACcat, from SAC Technologies, Inc., of Edina, Minn. The product provides secure Internet access.

Biometric Access Control System, from Hi-Key Technologies, of Eden Prairie, Minn. This is a centralized information management system based on fingerprint identification technology.

Citadel Gatekeeper, from Intelitrak Technologies, Inc., of Austin, Texas. This is a voiceprint gateway server used to verify users' network access rights.

``We recently started testing biometric products, and these six have reached certification status," said Peter Tippett, president of the ICSA, based here. He added that the group's work should provide assurance to users interested in this new type of secure authentication.

In its new handbook, called the ``Biometric Industry Product Guide," the ICSA identified 170 products that authenticate user identity based on physical traits.

``Many people are uncertain about using biometric products," said Tom Grecco, Mytec's president.

But with independent evaluations such as ICSA's certification process, he said the market may get the boost it needs.