{"id":3506,"date":"2018-09-21T11:04:38","date_gmt":"2018-09-21T15:04:38","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=3506"},"modified":"2018-09-21T11:04:38","modified_gmt":"2018-09-21T15:04:38","slug":"will-apples-facial-biometrics-affect-authentication","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/will-apples-facial-biometrics-affect-authentication\/","title":{"rendered":"Will Apple’s Facial Biometrics Affect Your Authentication?"},"content":{"rendered":"

\"Will<\/p>\n

Nine times out of ten, when enterprise decision makers and security experts discuss biometric authentication, they refer to either fingerprint readers or behavioral biometrics. The former is one of the most recognized types of biometrics; it benefits from its proliferation among and mass adoption by mobile device users. The latter is a rapidly growing component of identity security. Factors such as typing behavior and online activity have begun to be factored into enterprises\u2019 authentication process.<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Vocal or facial biometrics exist and have continued to develop over the last few years. Yet most security experts tend to preemptively rule out their deployment on an enterprise scale. Both technologies are still in their infancy. They tend to have high rates of false negatives and false positives. Both are even more sensitive to natural changes than fingerprint readers. Both can be tricky to use on mobile devices for workers on the go. With identity now becoming the enterprise perimeter, consistent and strong authentication security is more necessary than ever. Credential theft and attacks on enterprises\u2019 digital identities are only increasing. \u00a0<\/span><\/p>\n

Now Apple, easily the most recognized and most lionized mobile device manufacturer in the world, has decided to replace their fingerprint scanning with facial biometrics capabilities. Does this mean that your enterprise will soon be expected to adopt facial biometrics as well? Are facial biometrics the true future of the authentication market? <\/span><\/p>\n

First, it is important to remember that biometric authentication, including facial biometrics, do not exist in a vacuum. They function best as part of a two-factor (2FA) or multifactor authentication (MFA) protocol. These systems combine what a user <\/span>knows<\/span><\/i>, like a password, with something the user <\/span>has<\/span><\/i> such as their face or fingerprint. It offers greater security than a password-only single factor authentication policy (which has largely proved unreliable and unpopular). <\/span><\/p>\n

Additionally, biometric authentication is not necessary for every login or security layer. Facial biometrics are best suited to protecting the most valuable databases and assets on your network. The security on such important digital files must be in layers, and proving the authenticity of the user seeking access must be done as thoroughly as possible. In other words, biometric authentication may work best in a granular authentication protocol. <\/span><\/p>\n

However, Apple\u2019s optimistic facial biometrics requirements may actually prove a detriment rather than a selling feature. According to a survey by Callsign, only 27% of U.S. adults favor biometric authentication. 51% of U.S. adults prefer passwords to biometrics in the workplace, theoretically because passwords are perceived as easier to use. <\/span><\/p>\n

Thus enterprises need to evaluate their identity security needs before making the leap to adopting facial biometrics en masse like Apple. They need to ask hard questions, such as:<\/span><\/p>\n