Biometrics in Asia yet to hit sweet spot?

By Vivian Yeo, ZDNet Asia
Friday, June 06, 2008 07:43 PM

The outlook for biometrics is rosy in Asia but challenges in the deployment of the technology need to be overcome before mainstream adoption takes place, according to industry observers in the region.

Navin Rajendra, senior research analyst at consulting firm Frost & Sullivan, told ZDNet Asia that the region's market for biometric technology "has seen a slow and steady growth". Biometrics, he said in an e-mail, has been applied to a variety of applications such as banking, e-passport, consumer electronics and enterprise security.

"Although the rate of adoption has not been as high as previously anticipated, the entry of biometrics across these applications is just an indication for the pending high growth to take place soon," noted Rajendra.

Rajendra pointed out that the Asia-Pacific region has shown "great potential" for government identity and e-passport programs. With full-scale implementation of such projects, biometrics would see a growth in other applications as well," he added.

E-passport uptake is ongoing in the region, reported Hewlett-Packard. HP's public sector sales director for Asia-Pacific and Japan Tan Poh-Chuan said the company is working with authorities in South Korea and Taiwan to roll out biometric passports.

According to Mike Weber, Asia-Pacific director for Enterprise Security Initiative at Unisys, momentum for biometric deployment is increasing, from "the level of interest in trialing and implementing biometric solutions" in both the public and commercial sectors.

On the commercial front, the financial services industry is one of the verticals tapping on biometrics.

Abhishek Kumar, senior research analyst at IDC-subsidiary Financial Insights, noted that there has been "a lot of push" by the financial services industry in implementing biometrics at the retail banking level. Over the last two years, banks in Australia, India, Indonesia and Singapore have made plans or carried out such implementations.

However, many of the biometric initiatives are still in the pilot phases as the logistics of such endeavors are "quite complex", said Kumar. It is not uncommon for financial institutions in more developed countries to implement biometrics for physical security purposes in data centers and core technology centers, he added.

Industry observers say, however, that obstacles are still in the way for biometrics to go mainstream.

Frost & Sullivan's Rajendra said lack of standards and high implementation costs still hinder deployment of biometrics. Standardization of the technology is in progress, he noted.

"Industry participants are realizing the benefits of biometrics and it is only a matter of time before the benefits of biometrics are able to outweigh the costs involved in implementation," said Rajendra. "Currently, privacy issues are also a concern in Europe and North America, while in Asia, privacy issues have not been found to be a major deterrent."

Financial Insights' Abhishek also expressed concern at the lack of standards, particularly for biometric authentication algorithms and devices. "As these algorithms are often patented by vendors, financial institutions are forced to heavily rely on them. As seen with Citibank Singapore, this reliance can often lead to negative results."

Trust is another issue, said Unisys' Weber.

"Consumers have shown they want new and convenient services, but that they also expect security and privacy as a fundamental part of any service requiring them to provide personal information," Weber pointed out. "Misuse or theft of personal information remains the area or security with the greatest level of concern across all countries where the Unisys Security Index [is conducted]."

Organizations that offer or intend to offer customers services that utilize biometric identifiers, should seek to address security concerns in order to create trust, he added.

"Ultimately, outside public sector security uses, the adoption of biometric technologies will be driven by the value of the services they deliver to the consumer, rather than by the technologies themselves. And this adoption must be built on a platform of trust with regards to security and privacy," said Weber.


WORTHWHILE?

2

2 votes
Blog

Talkback 1 comments

Biometrics authentication must be traceless.
Different sensors, generating different biometrics outcomes, different outcomes cannot be encryptedly compared (they will never match). It is very difficult to create standard on inidentical encryption paths (Raw data). Biometrics standard can be obtained only if the common information is unconcealed. Currently each biometric scanner's vendor is responsible for generating his own encryption method. In order to unify the biometrics collection method(s) the Standardization procedure must force Biometrics exposure, however, exposed biometrics information present a serious threat to privacy rights.

Conclusions: There are no legal restrictions on biometrically identifying information, or biometric authentication systems. However: there are severe restrictions on collecting, creating, maintaining, using, or disseminating records of identifiable personal data. One immediate conclusion that we should draw is that biometrics authentication must be traceless.
Posted by Michael (Micha) Shafir on Monday, June 09 2008 02:56 PM


Tech Jobs Now!

Search for your ideal tech job:

Configure Apache to support multiple SSL sites on a single IP address

Open Source

With Apache 2.2.12 and support for the Server Name Indication extension to the SSL protocol, you can configure name-based HTTPS sites, just as you can name-based HTTP sites.


Read more »



Amendments to empower Copyright Tribunal

Blog thumbnail

As a lawyer, I often inform my clients about the need to clear licenses with the various licensing societies whenever they use works belonging to other parties. This is especially..... by Bryan Tan

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web