Just as fingerprints are used to confirm identities so to are biometrics signatures when used in access control and other applications. In Issue 8 we take an in-depth look at these implications and the practical areas for the digital investigator.

by Julian Ashbourn

Biometrics have proved useful in identity management across a variety of scenarios, from large scale border control and citizen identity applications to small scale corporate or specific sector applications where biometric identity verification can bring an additional dimension. Allerdings, there remain several factors, which are perhaps not as well or as widely understood as they might be in this context. Such factors include aspects of performance, such as equivalence of performance across nodes, Sicherheit, such as the relative security of biometric templates and, especially, human factors, including behavioural factors that have an impact upon performance and the assumptions made about the results of a biometric matching transaction.

If the use of biometrics in everyday situations proliferates, can they perhaps be used in more innovative ways from a digital forensics perspective? We are all familiar with the traditional use of fingerprints and “mugshots” for purposes of law enforcement. It will be interesting to observe whether the use of biometrics within the broader IT landscape lead to assumptions with respect to forensics, or perhaps new approaches to forensic investigation.

Within our ever-changing technological world it is natural that, as interesting technologies come along, we consider how we might use them with respect to existing processes. From a specific digital forensics perspective, it is equally natural, if not essential, that any new Information Technology is incorporated into our broader understanding. Allerdings, in einigen Fällen, the methodology involved may not immediately be clear. Biometric identity verifi cation technology may be a case in point. We have an understanding that biometrics can provide a relatively robust first or second factor personal identity authentication mechanism, but how might this help us from a digital forensics perspective? In this paper we shall review the biometric situation and posit some ideas and suggestions accordingly.

durch Biometrie und digitale Forensik.