BIOMETRICS + IDENTITY

The biometrics and identity industry now plays an essential role in nearly every consumer’s everyday life.

Whether it’s used to unlock a smartphone or other device, ease travel, or keep our nation safe, biometrics is also involved. For centuries, authentication has relied on two primary pillars: something you have such as a passport or physical key, or something you know, such as a password or Personal Identification Number (PIN). While ubiquitous, these traditional, token- and knowledge-based systems are inherently flawed. Tokens can be lost, stolen, or duplicated and knowledge can be forgotten, phished, or cracked. In response to the escalating security demands of a deeply interconnected digital world, a third, more personal pillar of authentication has risen to prominence: biometrics. 

Biometric technology anchors identity to the individual themselves, confirming identity based on unique and measurable biological and behavioral characteristics, referred to as modalities. These systems provide a tangible, real-world trait for identity verification that, unlike a password or key card, cannot be easily forgotten, misplaced, or stolen. This intrinsic link between the identifier and the person provides a powerful security advantage.

Biometrics have long been used by law enforcement, which remains one of the most visible and effective applications for criminal identification. In fact, the first known crime solved using fingerprint evidence was in 1892 when an Argentine police officer identified a fingerprint at a crime scene that led to the conviction of a suspect, although historical records suggest that fingerprints have been used as a unique human identifier for several millennia.

In the past few decades, biometric use has increased significantly, now encompassing a variety of sectors and uses. Today, biometrics are used to unlock electronic devices, secure borders, control access to sensitive facilities, protect financial transactions, verify time and attendance, secure networks, and prevent benefits fraud. And as technology advances, biometric technologies’ capabilities and use cases are constantly expanding.

How Biometric Technologies Work

Every biometric system, regardless of modality, follows a core process to enroll a user and later recognize them: 

1. Enrollment + Data Capture:

The process begins with enrollment, where a sensor is used to capture the raw biometric data from an individual, such as a camera taking a picture of a face, a scanner capturing a fingerprint, or a microphone recording a voice. The quality of this initial capture is critical to the overall performance of the system.

2. Feature Extraction + Template Creation:

The raw data is not stored directly. Instead, sophisticated algorithms analyze the capture to extract unique, distinguishing features, known as biometric markers. For a fingerprint, this is the location and orientation of minutiae points; for a face, it is the distances between key landmarks like the eyes, nose, and mouth. These features are then converted into a compact, mathematical representation called a biometric template. This template, typically an encrypted numeric value, is stored for future comparisons. The original raw image or recording is discarded to enhance privacy and security, as the template itself is virtually impossible to reverse-engineer into the original biometric image.

3. Matching:

When a user seeks to authenticate, they present their biometric trait to the sensor again. A new template is created in real-time and is compared against the stored template(s). A matching algorithm calculates a similarity score, which quantifies how closely the two templates match. If this score exceeds a predetermined threshold, the system confirms a match. Learn more about matching.

Biometric Technologies + Applications

Biometric Technologies + Applications

Biometric Technologies + Modalities

Learn More →

Enterprise + Business Applications

Learn More →

The Matching Process:

This process answers the question, “Are you who you claim to be?” The user makes an identity claim (e.g., by providing a username), and the system performs a one-to-one comparison between their live biometric template and the single template stored for that specific identity. This is used for authentication, such as unlocking a device or accessing a secure account. 

This process answers the question, “Who are you?” The system performs a one-to-many comparison, searching an entire database of stored templates to find a match for the user’s live biometric template. This is used in applications like law enforcement to identify a suspect from a crime scene fingerprint, or in national ID programs to prevent duplicate registrations.