New notebooks offer biometric protection

From...

by Jamie Fenton

(IDG) -- Your laptop is missing -- and with it, all your confidential data. Qualcomm Chairman Irwin Jacobs lived this nightmare last year when his notebook was stolen. In June came a scarier case: The elite Nuclear Emergency Search Team discovered that two laptop hard drives full of nuclear secrets had been misplaced.

There is no foolproof way to protect your notebook data, but biometric security technologies can make it safer. Unlike passwords, biometric devices measure unique biological traits -- like fingerprints, voice prints, or retinal images -- and compare them to a stored profile. You can use the PC if, and only if, your biometric data matches the profile of the rightful user.

MESSAGE BOARD Security on the net   IDG.net INFOCENTER PCWorld.com home Free daily newsletters PCWorld.com: Week in Reviews TechInformer Related IDG.net Stories Rules of thumb to strengthen security Biometrics software aimed at improving Windows NT security Biometrics suites earn a thumbs up Features Top 15 notebook PCs An inside tour of the Pentium 4 Surviving a disk crash: A checklist Visit an IDG site Choose a site: IDG.net CIO Computerworld Darwin Dummies.com GamePro.com The Industry Standard ITWorld.com InfoWorld.com JavaWorld LinuxWorld Macworld Online Network World Fusion PC World Publish.com SunWorld IDG.net search

Fingerprint recognition, the most developed of these technologies, is now appearing in the corporate world. Both Acer and Compaq have released new notebooks with built-in fingerprint scanners. The units run on Windows 2000 Professional edition.

No cloak-and-dagger

The devices are not error-free, so they're best suited for businesses that need another safeguard for standard or somewhat sensitive data -- not for top-level company secrets or environments where you need to log on quickly every time (for more on this, see "Rules of thumb to strengthen security," link below).

To get started, you enroll one or more of your fingerprints in the units' biometric database. During enrollment, the PC records your fingerprint minutiae -- the characteristic bends and end-points of your fingerprint ridges. You repeat this process several times to verify the consistency of the results before the system adds your profile.

To log in, scan in your fingerprint again. The system then compares the new scan with the stored image. If a certain number of details match, you'll gain access to your PC. You never have to match all of the stored details -- this lets the system work even if you scratch your finger or position it differently on the scanner than you did before.

And therein lies the rub. If you require too many matched details for identification, you will get lots of false negatives -- so you can't get to your data. If you set the acceptance threshold too low, you'll increase the number of false positives and may allow access to unauthorized users. Both of the laptops that we looked at enable you to alter this setting.

Hands on

Acer's $3499 TravelMate 739TLV uses a Veridicom sensor and comes with two biometric programs: VbxCTR software controls rebooting and log-in, while WhoIsIt lets users encrypt directories and store passwords. Unfortunately, the two programs don't share a single biometric database, so you have to enroll your prints twice.

The $3999 Compaq Armada E500 uses an Identix scanner. When sensing a fingerprint, the unit emits a red light, so you can easily tell when the scan is done. Another plus is easier enrollment: The Identix software is integrated with the Windows 2000 user management database, so you can enroll through an option in the log-in dialog or by navigating the system administration dialogs.

Neither laptop's biometric system worked perfectly. Getting the scanners to accept my fingerprint was like struggling to feed a faded dollar bill into a vending machine -- try and try again. On the reboot check, the Acer locks up after four failures and requires a hard restart before allowing four more tries. With practice -- and patience -- you can train yourself to present your finger more consistently, and the false negatives go down. As a backup, both systems let you use a password to get in.

The Compaq's biometric features seem better integrated with the OS, simplifying administration. The Acer's WhoIsIt program, however, gives it a features edge, despite the inconvenience of double enrollment. The technology is far from perfect right now and mostly seems to solve one real problem: People often choose bad passwords.

Crossing the wireless security gap
January 3, 2001
Privacy questions loom as wireless grows
December 19, 2000
Company scans for viruses targeting PDAs, WAP devices
November 3, 2000
Acer notebook supports security cards, wireless
October 20, 2000
Virus protection coming for wireless users
October 19, 2000
Location information could invade wireless privacy
October 5, 2000

Rules of thumb to strengthen security
(PCWorld.com)
Biometrics software aimed at improving Windows NT security
(Network World Fusion)
Biometrics suites earn a thumbs up
(Network World Fusion)
With biometrics, you are your own password
(InfoWorld.com)
Biometrics meet wireless Internet
(Computerworld)
Biometrics are not an invasion of privacy
(Network World Fusion)
Biometrics scan the future
(InfoWorld.com)
Army takes the lead in biometric security research
(Network World Fusion)

Acer America
Compaq Computer Corp.

Note: Pages will open in a new browser window

External sites are not endorsed by CNN Interactive.