Finger Scan Biometrics Most Popular Data Center Security Device

Rawlson King, theWHIR.com

July 16, 2002 - Biometrics is extremely popular as a physical access strategy with data centers and network collocation facilities. Biometrics is the science of measuring an individual's physical properties, and refers to the emerging field of computer systems devoted to identification of individuals using biological traits, such as those based on retinal or iris scanning, fingerprints, or face recognition.

By determining an individual's physical features in an authentication inquiry and comparing this data with others' biometric data, identification for a specific user can be determined and authentication for access to computer systems or physical facilities can be granted. There are various biometric systems ranging from iris codes and fingerprints to voice patterns and facial images.

A basic biometric system is made up of sensors to record a biometric trait; a computer unit to process and save the biometric trait; and an application, for which the user's authentication is required.

The most secure and well-designed Internet data centers will integrate biometric technology throughout their premise to secure the integrity of their clientele's equipment and data. Indeed, most largest Web hosting firms that operate their own data center facilities will use a combination of biometrics and closed circuit television (CCTV) to control and monitor access into entry points and biometric readers to restrict access to network equipment cages.

Biometric systems are an excellent method for securing data facilities since networking equipment and data storage devices are centralized, creating a localized, enforceable security zone. User applications that require protection include server and storage devices and their resident data, CAT-5 cabling, and physical access. The best-financed hosting firms will utilize biometrics to accommodate their customers' demands for maximum levels of security.

"Data centers have been early adopters of biometrics," says Richard Norton, executive director of the International Biometric Industry Association. "This is because there is so much at stake in them."

Indeed, the Internet and resulting electronic commerce has driven the need and demand for effective, cost-efficient biometric devices. Data centers worldwide contain mission-critical servers processing billions of dollars of transactions daily. For this reason, most data centers install the security devices to concurrently protect their multi-million dollar capital investment while also providing an incentive to customers to use their facilities. For many organizations, the use of third-party data center facilities that have installed biometric security devices lowers insurance costs and/or fulfils insurance obligations. Many data centers are not reluctant to install the equipment either, since the price for such systems have sharply declined.

"Security related technologies such as biometrics that were once very expensive and maintained an unacceptable failure rate are now within a reasonable cost and performance range," stated Don Meyerhoff, a physical security specialist with the General Services Administration of the U.S. government, in a written report published by the Security Industry Association (SIA).

Accordingly, a finger scan reader that may have cost $500 three years ago, will now only cost $100. More complex devices such as iris scan readers have also dropped precipitously in price, with manufacturers predicting units under $1000 in the near future.

Most data centers secure their network facilities with finger scan technology. According to recent report released by the Security Industry Association, 52 per cent of biometric buyers chose fingerprint technologies. Eye-scan technology is the most accurate biometric technology in use, but it is also the most expensive.

The best possible implementation of biometric technology in an Internet data center environment would involve a combination of both types of technologies, intermingled with ID code card access and CCTV monitoring. Using an ID code card, users must identify him or her self to a device by way of a personal number or card so that the device may also corroborate his or her identity. Using a combination of code card and biometrics technologies decreases the possibility of physical compromise of equipment, according to Norton.

Consumers should thus seriously and carefully examine the security precautions that hosting firms elect for use in their premises before selecting a collocation or dedicated server provider. Hosting firms should also pay serious attention to providing the most advanced biometrics technologies to their clients. The tangible benefits of deploying biometrics includes enhanced security, potentially decreased insurance costs for the hosting firms and its clients and added market value for the data center facilities.