Using biometric characteristics as a means of recognising people is a promising approach for authenticating identities. Biometrics are suitable for complementing or replacing conventional methods such as a PIN/password and card or other tokens. This is because, in contrast to having to remember or carry something, physical characteristics are not only indirectly unique to people but also a physical part of us.

Operating principle of biometric procedures

Within the meaning used in this document, biometrics generally refers to the automated recognition and identification of persons based on their physical characteristics. Conversely, the BSI acts as the IT security service provider for the German government and thus does not deal with biometrics in the wider sense, which includes all areas of life sciences in which findings about medical, biological, psychological or ecological relationships are acquired through empirical studies. From an IT security perspective, which is the main focus of the BSI, the aspects of recognition performance and security are particularly important when considering biometrics. Important framework conditions such as acceptance and usability as well as legal bases are also part of the broad consideration.

In addition to general information on biometric procedures, the following pages cover specific findings from projects carried out by the BSI. The focus here is centred on scientific studies on specific aspects of the various biometric procedures (e.g. BioFace and BioFinger). In addition, the BSI carries out field studies that also deal with fundamental questions (e.g. BioP).

Technical principles

In our modern times, the need for reliable personal identification is increasing. We currently have to deal with the issue of personal identification e.g. in e-commerce, access control systems, counter-terrorism etc.. While being identified using an object such as an identity card still serves its purpose, it is becoming increasingly less important in today's digitally connected world with a population of more than 6 billion people.

This is why biometrics is becoming more significant, especially in recent times, as it links personal identification with unique and partly unchangeable or stable characteristics of a person over a long period of time. People have certain unique characteristics (in the sense of physical features) that are formed in the earliest stage of human life in a random process (randotypic) and differ among every individual.

As more technologies become available and become more complex, accurate and automated personal identification becomes essential. For example, the identification process can be used to regulate access to specific objects through specific permissions. Anyone who is successfully identified and therefore approved is granted the specified privileges. Identification (e.g. dactyloscopy) plays an important role in police work. These are just two instances from many where "biometric" identification is used.

An introduction to the technical principles of biometric authentication is available here (PDF).

Glossary

The following glossary on the Christoph-Busch.de website is based on ISO/IEC JTC SC37 Harmonized Biometric Vocabulary (HBV). This standard was not used in earlier BSI publications.

Contact

If you have any questions or comments regarding biometrics in general or in reference to specific BSI projects, please contact: biometrie@bsi.bund.de