TSSI Verid+
Fingerprint Biometrics FAQ
ID cards without biometrics have an inherent weakness in that the use of such a card does not prove the legitimacy of its use by the holder. The loss, theft or lending (buddying) of non-biometric cards can lead to access by unauthorised personnel who are not required by the access control system to prove they are who they say they are. TSSI's fingerprint biometric solutions overcome the inherent weaknesses of standard ID cards.
What is identity theft?
Identity theft is a crime in which an impostor obtains key pieces of personal information in order to impersonate someone else. The information can be used to obtain credit, merchandise, and services in the name of the victim, or to provide the thief with false credentials. In the access control environment, using another person's swipe card is identity theft. Incorporating fingerprint biometrics in the access control system eliminates this form of impersonation and provides full verification of identity.
What are the surest ways to verify the identity of an individual?
Biometrics offer the surest way to verify an individual's identity. It is the science of using biological properties, such as fingerprints, voice patterns, retinal and iris scans, faces, and even the chemical composition of an individual's perspiration, to identify individuals to some form of database. The technology, such as TSSI's fingerprint biometrics, verifies conclusively that individuals really are the persons they claim to be.
What are biometrics?
Biometrics refers to the automatic identification of a person based on his/her physiological or behavioural characteristics. This method of identification is preferred over traditional methods involving passwords and PIN numbers for various reasons:
the person to be identified is required to be physically present at the point-of-identification
identification based on biometric techniques obviates
Various types of biometric systems are being used for real-time identification, the most popular are based on face, iris and fingerprint matching. However, there are other biometric systems that utilise retinal scan, speech, signatures and hand geometry.
A biometric system is essentially a pattern recognition system that makes a personal identification by determining the authenticity of a specific physiological or behavioural characteristic possessed by the user. Depending on the context, a biometric system can be either a verification (1:1) system or an identification (1:N) system.
What is the scale of the staff theft problem in Retail?
In the UK retail industry 'stock shrinkage' is a significant problem. According to the British Retail Consortium, in 2002 the value of retail crime has been calculated to be x2.25bn; 37% of which was theft by staff. TSSI's fingerprint biometrics are being adopted by an increasing numbers of leading UK retailers to reduce stock shrinkage.
How is TSSI assisting retailers to reduce stock shrinkage?
Retailers don't need reminding of the scale of theft from their stores or that an estimated 37% of these crimes involve staff. As a result, retailers are implementing fingerprint biometrics from TSSI to enhance their security. Organisations like Selfridges, Peter Jones, Boots, John Lewis and Nike are at various stages of trial or implementation. They all need to prove who has been where and when; fingerprint biometrics gives that unequivocal certainty.
TSSI has been working closely with a range of retailers nationally over the last fifteen months. Based on its highly successful Verid+x product family, the solutions have proved to be very secure, reliable, robust and seamless to integrate; whether within existing infrastructures or standalone.
How often in stores are passwords, security passes or PINs borrowed? These forms of security are treated without respect by the very people they are intended to deter; as a result, identity impersonation has become an accepted part of retail life.
To date many retailers have installed a range of digital locks with pin numbers, prox cards or swipe cards systems. Undoubtedly, these approaches provide a level of security. However, they can be easily compromised. As these systems only confirm the card or pin number is correct, rather than the actual person, a lost, stolen or even borrowed card can be used by a bogus user to gain access. Fingerprint biometrics proves they are who they say they are.
This enhanced security is not restricted to back-end operations. EPOS biometrics is key to dealing with front-end fraudulent activities that occur on a daily basis. By eliminating staff impersonation, refunds, mark downs, discounts and gift voucher fraud can be dramatically reduced and the overall security infrastructure of the retailer strengthened.
The use of by retailers of data mining software has been very productive in recognising trends and patterns. However, data mining addresses the potential losses after an event occurs. TSSI's fingerprint biometrics prevent the activity from happening in the first place with the result that the retailer takes back control of their EPOS system and makes the staff responsible.
Responsibility is the key to successful implementations of fingerprint biometrics. It makes people responsible and with responsibility comes effectiveness and productivity.
Retail chains, by definition, have multiple sites. Staff movement between stores, which can compromise security systems, is a fact of life. TSSI has developed web technology that allows central control and local deployment. Staff can be moved at will between stores with their security rights having been pre-set. Enrolments, deletions, amendments and monitoring access rights can be carried out remotely from anywhere in the world, thus saving time and money while ensuring the integrity of each site's security.
The feedback from TSSI's retail clients has shown that staff are welcoming the systems with open arms. The interaction and use of the systems by staff clearly shows that they are taking a tighter control on security and waking up to their responsibilities.
Some retailers were concerned that the fingerprint biometrics system would raise data protection issues, by, for example, holding fingerprint DNA from individuals. TSSI fingerprint biometrics systems do not hold the DNA of a person. That is because the enrolment of the finger template is converted into a sophisticated binary number and it is to this number, not the fingerprint, that the system references.
The last fifteen months has shown that biometrics is definitely the way forward for retailers who want to tighten security in their vulnerable areas; from stock room to shop floor, cash office locations, warehouse high value areas, IT rooms, HR, managers or directors offices or even stock merchandising rooms.
What are the advantages of biometrics?
By unequivocally linking an individual to a transaction or event, biometrics precisely verify who did what, where and when. The indisputable evidence of biometrics means that they add value to Loss Prevention or Time & Attendance solutions by minimising the opportunity for ID fraud through unauthorised use of lost, stolen or "borrowed" ID cards, PINs and passwords.
How can fingerprint biometrics help to reduce staff theft?
To date many retailers have installed a range of digital locks with pin numbers, prox cards or swipe cards systems. Undoubtedly, these approaches provide a level of security. However, they can be easily compromised. As these systems only confirm the card or pin number is correct, rather than the actual person, a lost, stolen or even borrowed card can be used by a bogus user to gain access. Fingerprint biometrics proves they are who they say they are.
This enhanced security is not restricted to back-end operations. EPOS biometrics is key to dealing with front-end fraudulent activities that occur on a daily basis. By eliminating staff impersonation, refunds, mark downs, discounts and gift voucher fraud can be dramatically reduced and the overall security infrastructure of the retailer strengthened.
For what applications can biometrics be used in Retail?
Biometrics can be used for almost any application that requires tightening up of security for restrictive use or access within retail. Examples include EPoS, control over staff access to stock rooms, cash offices, server rooms and key cabinets.
How easy is biometrics to implement with current systems?
TSSI biometrics systems are designed and developed in such a way that integration and implementation with existing infrastructures is seamless.
With an access control system that uses Pro/PIN/swipe systems, can biometrics be added to the current infrastructure?
This is achievable in the majority of the cases. TSSI has developed unique system software that will easily adapt to existing systems; without interfering with the current system. It involves little more than connecting two wires to the biometric unit from an existing entry panel.
Can the TSSI biometric systems log the time and date of user activities?
The Verid+ LogView unit can provide date and time stamp of user activities by means of a simple database which can be to readily exported to an XL spreadsheet.
How do I know if cardholders are using the system correctly?
TSSI has developed a performance logger for all Verid biometric units . The program will clearly identify users that are using the system correctly. The data prompts which users need retraining to maximise the benefits of the system
Can the Verid+ products control over 1000 users?
The Verid+ unit can control up to 3000 users. If required this can be expanded subject to understanding the specific application and criteria.
How can organisations with many users move between sites ensure that these cardholders will be granted access to other sites where biometrics is installed?
TSSI has developed Verid+ Browser to provide remote card management. Using internet technology the secure system allows control of all fingerprint biometric units that are networked together from one central point. As a consequence any number of units can be managed wherever they are located in the world. This is particularly useful when dealing with new starters and leavers in retail or in any industry. A central authority, which may be HR, can now carry out inductions at Head Office and then provide access rights at whichever sites are appropriate. Additionally, the Verid+ Browser software contains features for deletion, amendments of access rights, changing groups and monitoring users; an effective powerful and time saving solution for large and disparate organisations.
TSSI also provides solutions to deal with high volume of users and large numbers of readers. The 'template on card ' system stores cardholders' fingerprint templates along with other information on a chip on a card, as opposed to a central database. When a user moves from one site to another or to another area, the Verid+ reader will verify the details on the template to that stored on the card, once matched access is granted. So if this card is lost or stolen, the card becomes useless to another.
What training is needed to implement and use biometrics?
TSSI provides quality training programs. TSSI carries out on-site training with administrators or SuperUsers, (authorised personnel that will add new users to the system), and then assists with the initial enrolment of users onto the system. From experience, clients grasp the enrolment technique very quickly.
Do biometric systems slow down throughput?
Verid+ systems work at an exceptionally fast speed. TSSI has designed and developed the system to ensure consistent and reliable throughput; it takes about a third of a second to process a verification.
What if there is a fire or evacuation in the building?
Verid+ systems are connected to the magnetic lock system which in turn is connected to the Fire Control panel. In the event of an emergency, the biometric system is overridden and doors automatically opened.
Why are biometric systems better that conventional locks and access control systems with just swipe/prox/PIN?
With many access control systems the person or user does not have to be present for access to be granted. This immediately jeopardises the security system as anyone could have found a swipe or prox card or seen a PIN and so gain access easily. The TSSI system stops this compromise. As fingerprint biometrics provide unique identities, the enrolled user must be present to present for verification to occur.
How does is the biometric recognition system affected by the Data Protection Act?
The are no issues with the Data Protection Act. TSSI's fingerprint biometric solutions use a captured digital image of the enrollee's finger, not a forensic print. This captured image is converted to a template and held in a binary format. Once the template is stored in the system the data cannot be extracted or reverse-engineered to produce a print. Every cardholder can use the system without fear that they have DNA stored in the system.
Can TSSI systems be integrated with CCTV or intruder alarm systems?
The software design allows the system to interact with both types of systems. CCTV to monitor exits and entry points or intruder alarms can be controlled by biometrics instead of standard pins systems through integration with a TSSI system.
Can an existing T&A systems be integrated with TSSI biometric solutions?
Not only can they be integrated, there are real benefits in eliminating impersonation as card sharing or 'buddying' is impossible. Such practices can cost businesses substantial sums every year. Fingerprint biometrics ensure that every access can be undeniably matched to an individual.
Why is a small template advantageous?
When the template that stores the fingerprint's algorithm is very small, say 52 bytes, then opportunities arise to store other personal data at an economic cost. Furthermore, when the template is stored on the card rather than in the reader, its usefulness in large or dispersed multi-user sites increases. Costs are minimised as no network is required to connect to a central database and access requests are handled faster.
The inclusion of each cardholders fingerprint biometrics eliminates the risks from buddying and impersonation. With the data stored on a template on the card, the carriers identity is verified instantly at each point of entry. Now reports can identify precisely who was where and when. Enhanced card management
enGuardPro user-friendly card management facility has an integrated Photo ID card production capability. The system allows for the capture of a cardholder image from file or video source, the selection of a badge design and the printing of the finished card. Card designs can incorporate any combination of logos, fonts, bar codes and backgrounds.
T: 0845 680 0228 | F: 0845 680 0229 | E: sales@axxess28.com
Copyright © 2001-2008 Axxess 28 Limited. All rights reserved.