![](https://investorshub.advfn.com/uicon/16916.png?cb=1677008834)
Sunday, March 18, 2018 1:18:04 PM
by Selena Larson @selenalarson March 18, 2018: 12:13 PM ET
More companies are ditching passwords and using fingerprints and other biometrics to stop hackers.
"We're seeing a very rapid evolution from what used to be passwords, then smart cards, and now to biometrics," said Alex Simons, director of program management in Microsoft's identity division.
Biometric authentication uses face, fingerprint or iris scans to quickly confirm a person's identity. You probably already use it by touching the home button to unlock your phone.
In the workplace, employees are increasingly using biometrics to log in to phones and computers, and to access data stored on those devices and in the cloud.
Spiceworks, a professional network for people in the IT industry, says nearly 90% of businesses will use biometric authentication by 2020, up from 62% today. Fingerprint scanning is currently the most common type of biometric authentication: 57% of organizations use it. Far fewer, just 14%, use facial recognition.
Companies such as Microsoft (MSFT) and Facebook (FB) are trying to get rid of passwords completely.
In 2015, Microsoft introduced Windows Hello with Windows 10. The new software uses face scans or fingerprints to log in to Windows devices. More than 50 million people use Windows Hello to log in to their PCs both in the home and at the office.
The Windows 10 Spring Creators Update launching in April will include a new authentication standard developed in collaboration with other tech companies, including Google. Called FIDO 2.0, the standard will enable Windows consumers to use multiple devices — including third-party security keys or a security monitors that track your heart rate — to automatically log in to their computers without a password.
Related: Google's face match feature doesn't work in Illinois and Texas
"Passwords are the weak link. They have terrible characteristics about them, and they're hard for you to keep track of," Simons said. "Passwords are also super expensive for companies."
At Microsoft, Simons said he spends over $2 million in help desk calls a month helping people change their passwords.
Passwords are still widely used, of course, and one benefit is that they're easy to change if they're stolen. But you can't change your face or fingerprints, and biometrics can be stolen, too. In 2015, a breach at the federal Office of Personnel Management leaked 5.6 million people's fingerprints.
It's unclear for now what hackers can do with fingerprints. Experts worry that if they're adopted widely for authentication, it could lead to widespread identity theft. Researchers have already shown it's possible to use spoofed fingerprints to log in to smartphones.
Researchers have already tricked facial recognition by using a photo on older Windows devices and a Samsung smartphone.
Companies and consumers are also worried about third parties that are getting access to people's face scans through products like the iPhone X. Last year, Apple introduced facial recognition unlocking technology on the iPhone X and privacy advocates cited concerns about third-party companies having access to people's face scans. But the data shared with iOS developers reportedly can't unlock phones.
Meanwhile, Simons said biometrics collected with Windows are stored on the device directly and not shared to the cloud or with other third-party companies. Microsoft also provides the option to use a pin number instead of a biometric scan for anyone who is wary of sharing physical attributes.
State laws restricting biometric collection have hindered face and fingerprint-scanning tools or apps in some states. In 2008, Illinois passed a law that requires companies to let users know when biometric identifiers are collected and how they will be used. It's also necessary to obtain consent from users before collecting and storing that data. In 2009, Texas passed a similar law.
Data protection regulations about to go into effect in the European Union will also require consent before processing biometric data.
Biometrics will probably become just one part of a broader security strategy, perhaps as a second-factor login in addition to a password. Spiceworks' data shows just 10% of information technology workers think biometrics are secure enough to be the only form of authentication.
Other companies are using employee behavior to detect hacks.
Security firm BioCatch provides tools for companies to learn employees' digital behavior and identify when an unauthorized person is trying to access information.
Companies can add BioCatch software to apps and websites. It runs in the background to build a "behavior profile" of a user, and learns activities like how someone holds the phone, whether they type with one or two hands, and how they scroll or toggle between screens.
"The connected economy is forcing a need to redefine digital identity and to rely on new ways to make sure people are who they claim to be," said Frances Zelazny, vice president at BioCatch. "Your name and your pet's name, knowing that does not guarantee you really are a legitimate person."
Banks and the financial services industry are most interested in behavioral biometric technology. The Royal Bank of Scotland uses BioCatch.
People may be cautious about having their behavior tracked, but the trend toward biometrics should only grow.
"As we get better at explaining to the world how it works and as refine the software to make it easier to setup and use, more people are using it," Simons said. "Rather than trying to convince people that we're right, we're trying to give people options. We are trying to do everything in an upstanding manner to protect your privacy."
CNNMoney (San Francisco)
First published March 18, 2018: 12:08 PM ET
http://money.cnn.com/2018/03/18/technology/biometrics-workplace/index.html
"Intellectuals solve problems; geniuses prevent them." - Albert Einstein
Recent BKYI News
- BIO-key Secures Los Angeles LGBT Center's IT Systems with Seamless Badge-Tap Authentication Solution • GlobeNewswire Inc. • 06/25/2024 12:29:00 PM
- Form 8-K - Current report • Edgar (US Regulatory) • 06/17/2024 08:17:51 PM
- Identity and Access Management Software Provider BIO-key Reports Q1’24 Revenue of $2.2M and Positive Operating Cash Flow; Hosts Investor Call Tuesday, 10am ET • GlobeNewswire Inc. • 06/17/2024 12:00:00 PM
- Form 10-Q - Quarterly report [Sections 13 or 15(d)] • Edgar (US Regulatory) • 06/14/2024 09:03:09 PM
- Form 8-K - Current report • Edgar (US Regulatory) • 06/14/2024 09:01:36 PM
- BIO-key Introduces Passkey:YOU, a Phish-resistant, Phoneless and Tokenless Biometric FIDO Passkey Authentication Solution • GlobeNewswire Inc. • 06/14/2024 12:00:00 PM
- Identity, Access Management and Cybersecurity Solutions Provider BIO-key International Hosts Q1 Investor Call Tues., June 18th at 10am ET • GlobeNewswire Inc. • 06/13/2024 02:30:00 PM
- Form 10-K - Annual report [Section 13 and 15(d), not S-K Item 405] • Edgar (US Regulatory) • 06/05/2024 09:27:22 PM
- Identity and Access Management Solutions Provider BIO-key to Participate in Fireside Chat at the Maxim Group Virtual Tech Conference, Tues. June 4th at 9:00am ET • GlobeNewswire Inc. • 05/31/2024 05:59:00 PM
- Form 8-K - Current report • Edgar (US Regulatory) • 05/24/2024 08:46:11 PM
- BIO-key International, Inc. Receives Notice of Non-Compliance from Nasdaq • GlobeNewswire Inc. • 05/24/2024 08:30:00 PM
- Form NT 10-Q - Notification of inability to timely file Form 10-Q or 10-QSB • Edgar (US Regulatory) • 05/16/2024 09:06:35 PM
- BIO-key Expects to File Audited 2023 Results on Form 10-K and Report Q1 2024 Results and Host an Investor Call Next Week • GlobeNewswire Inc. • 05/16/2024 08:55:09 PM
- BIO-key Wins Coveted Global InfoSec Award for Multi-factor Authentication During RSA Conference 2024 • GlobeNewswire Inc. • 05/07/2024 12:59:00 PM
- BIO-key International, Inc. Receives Notice of Non-Compliance from Nasdaq • GlobeNewswire Inc. • 04/22/2024 08:30:00 PM
- Switzerland’s Canton of Ticino Implements BIO-key’s Multi-Factor Authentication Solution in its Information Systems Center • GlobeNewswire Inc. • 04/09/2024 01:15:00 PM
- Identity and Access Management Software Provider BIO-key Preliminary 2023 Results: Operating Loss Trimmed Approx. $3.5M on Approx. 29% Revenue Growth to $9.1M; Investor Call Tomorrow at 10am ET • GlobeNewswire Inc. • 04/01/2024 08:45:00 PM
- Identity and Access Management/Cybersecurity Solutions Provider BIO-key International Hosts Q4 Investor Call Tues., Apr. 2nd at 10am ET • GlobeNewswire Inc. • 03/27/2024 01:30:00 PM
- Humanity International Investments Hits Major Milestones in Digital Identity with the Humanity Protocol Initiative in Partnership with BIO-key International • GlobeNewswire Inc. • 03/12/2024 06:17:46 PM
- BIO-key Receives $1.5M Pre-Paid, Two-Year Software Subscription Order for its Biometric Identification Platform • GlobeNewswire Inc. • 02/20/2024 01:59:00 PM
- Form 424B3 - Prospectus [Rule 424(b)(3)] • Edgar (US Regulatory) • 02/16/2024 10:02:13 PM
- Form SC 13G - Statement of acquisition of beneficial ownership by individuals • Edgar (US Regulatory) • 02/14/2024 08:30:35 PM
- Form SC 13G/A - Statement of acquisition of beneficial ownership by individuals: [Amend] • Edgar (US Regulatory) • 02/14/2024 01:04:15 AM
- Form EFFECT - Notice of Effectiveness • Edgar (US Regulatory) • 02/13/2024 05:15:36 AM
- Bridgetown, Barbados Credit Union Selects BIO-key’s PortalGuard to Enhance Access to Shared Workstations Including Biometrics • GlobeNewswire Inc. • 02/06/2024 01:59:00 PM
FEATURED POET Wins "Best Optical AI Solution" in 2024 AI Breakthrough Awards Program • Jun 26, 2024 10:09 AM
HealthLynked Promotes Bill Crupi to Chief Operating Officer • HLYK • Jun 26, 2024 8:00 AM
Bantec's Howco Short Term Department of Defense Contract Wins Will Exceed $1,100,000 for the current Quarter • BANT • Jun 25, 2024 10:00 AM
ECGI Holdings Targets $9.7 Billion Equestrian Apparel Market with Allon Brand Launch • ECGI • Jun 25, 2024 8:36 AM
Avant Technologies Addresses Progress on AI Supercomputer-Driven Data Centers • AVAI • Jun 25, 2024 8:00 AM
Green Leaf Innovations, Inc. Expands International Presence with New Partnership in Dubai • GRLF • Jun 24, 2024 8:30 AM