Is Biometric Technology Right for Your Business?
We look in more detail at biometric technology to find the right time and attendance solution for your business.
In recent times there has been a great deal of discussion about the proper use of biometric technology — things like hand scanners, fingerprint recognition, finger-vein recognition and facial recognition. Ee are not trying to make an argument for or against the use of biometrics, albeit there are many arguments on each side of that debate.
In our last article we examined the most common time and attendance options available, including reviewing some of the aspects of biometrics. This article further explores the area of biometrics in more detail, helping you make the right choice for your business.
Previously, we compared technologies based on performance, convenience and cost, so we will take the same approach here when comparing these biometric options.
Dedicated biometric systems such as fingerprint, finger vein and facial identification have made significant technological leaps in recent years. This is partly due to the increase of consumer smart phones, tablets and cameras, which use powerful processors and have adequate storage (needed for the profiles you may need to match against). Similarly, increased security investment since 9/11, added to greater public awareness of data privacy, has forced manufacturers to innovate like never before.
Consequently, performance should not just reflect speed but also security. It should never be possible to reverse engineer an image of a face, a fingerprint or finger-vein pattern from the data that is collected. Clearly, if you could, you would have an immediate security concern, so any such technology should be avoided. Best practice is to measure between points on a face, finger or vein structure, taking enough measurements to ensure that two individuals can never match, then embed that in a solution that further eliminates errors or at least alerts you to potential conflicts.
In terms of speed, in our last article we addressed the difference between verification (a two-step process) and identification (a one-step process), which can be important at busy times, but we didn’t address some of the other aspects.
For verification, it is common to rely on a PIN or smart card which contains the biometric profile to match against, but then to have the sensitivity to matching turned down. This means that the machine or terminal is less tuned to matching. ‘Resemblance’ may be a better way to describe the level of match.
Identification, on the other hand, relies on more measurements and geometry to ‘look up’ and confirm you are who you say you are. This is more secure. Sensitivity must always be set to ‘high’, as lower sensitivity creates too many failures. In addition to these system-related challenges, physical failure modes may also be a factor, especially when dealing with fingerprints.
Fingerprints are friction ridges on a person’s finger. The valleys between the ridges can trap material such as oil, grease, dirt and moisture that will interfere with fingerprint measurement. Similarly, working with rough materials can wear down fingerprints and make them unreadable. Depending on the nature of the work, these factors can limit the effectiveness of a fingerprint-based approach. It may be best to do a trial with a fingerprint reader before committing to this technology.
Systems based on finger-vein recognition are not impacted by the effects of materials and environment on fingerprints. They work by shining near-infra-red light into the finger or thumb, then reading the vascular pattern. The light is absorbed by the hemoglobin in the blood, making the veins appear as dark lines on an image. Similar to a fingerprint, the pattern is unique to each individual.
As a technology, finger-vein recognition is now nearly 15 years old, and while not fully commoditized it is very cost-effective, and used more widely than many realize. The weak point is the sensitive equipment. Rather than having a plate you rest the finger on, the finger or thumb is placed on a piece of glass. The glass is fragile and could quickly fail if vandalized. But if cared for, this technology is a very effective way to identify your workforce and doesn’t have any of the pitfalls associated with fingerprint recognition.
For years, facial recognition has seemed like the tool of spies, top secret bunkers and government agencies, and while that may be true, its introduction into video game consoles and smartphones has made it more readily available, more cost effective and more reliable.
This technology relies on 3D measurements of facial geometry, using measurements in the X-, Y– and Z-axes. Note, however, that 2D recognition is flawed, as it is easily duped by a flat image, such as a photograph or image on a high-resolution screen held up to the camera. 3D recognition, on the other hand, is difficult to fool making it more than adequate for time and attendance purposes. Facial recognition also has the added benefit of being non-contact, reducing the risk of transmitting infection. It is also fast, secure and reliable, offering almost unparalleled advantages to over competing technologies.
Biometrics are very convenient — once installed. They require mains power, or power over ethernet (PoE), and connectivity to the internet (by SIM, Wi-Fi or ethernet), so installation isn’t as convenient as for some other options. Similarly, the biometric profile of an individual needs to be registered on the units, so that when an employee next attends the terminal they will be identified as attending at that time in the location of the terminal. As a result, configuration isn’t as convenient at setting-up stage either. That said, once installed and configured, the pace at which employees can register attendance, without reference to apps, phone lines, SMS and the like, makes it the fastest and most secure way to log employees in and out of a location.
As we have already noted, consumerisation has been a major factor in performance but it has also been a huge factor in reducing costs. The cheapest biometric terminals for time and attendance cost just a few hundred pounds. At that end of the market, a system may have its flaws. For example, terminals may not push data per time-and-attendance event, causing errors to monitoring and timesheets; they may not time-sync the terminal with time servers meaning you get ‘punch drift.’ They may also only be 2D, or they may suffer from lumen/daylight interference or over exposure. They may also not store enough profiles. These are all factors you need to consider.
If you are not an experienced buyer of this technology, it’s important to remember that you don’t have to make these decisions in a vacuum. Our advice would be to buy from the software partners you use, who themselves will have thought about this and sourced reputable, reliable options.