A simple and secure approach to biometric identity verification
Privaris products are targeted for use by the average consumer, small businesses, corporate enterprises of all sizes, and federal, state and local governments. Privaris has designed and developed a family of key-fob sized, personal, mobile devices that authenticate an individual's identity before interacting with their existing security systems used for granting access to buildings, offices, and garages (physical security), and computers, networks, and websites (logical security), as well as with the latest "wave and pay" contactless point-of-sale terminals for biometrically authenticated credit card transactions. By applying innovative product design, manufacture, and distribution, Privaris is enabling the widespread adoption of personal and affordable biometric security solutions across a broad segment of society – today. The company's hardware and software products apply the power and security of fingerprint biometrics to everyday life.
Name: John Petze Position: CEO Previous jobs: President & CEO Tridium Inc. (Acquired by Honeywell in 2005), VP Product Development Andover Controls. Education: BS Eng, Cum Laude, Worcester Polytechnic Institute. Residence: Keswick, Virginia Other interests: Antique automobiles (muscle cars) Favorite Charity: Compassion International
In the following interview, John Petze, CEO - Privaris discusses 1:1 with Rake Narang, Editor-in-chief of Info Security Products Guide, a simple and secure approach to biometric identity verification.
Rake Narang, Chief Editor - Info Security Products Guide: What are the advantages of biometric authentication in terms of level of security and time to authenticate fully? Are biometric enabled solutions scalable for enterprises of all sizes? What are the implications of lost biometric devices for an enterprise? John Petze, CEO - Privaris: Biometrics provide a very high level of assurance of identity. Analysis of biometric features such as fingerprints can provide highly reliable and fast verification times (less than one second). New approaches to the use of biometrics makes it feasible to quickly and easily deploy on a very large scale to enterprises, and to offer a simple approach to the convergence of physical and logical access control with a universal biometric token.
Revocation of lost credentials is a challenge with all security systems. With a biometric credential – a biometric “token” for example – the urgency of revocation is dramatically reduced. For example, if my access card is lost or stolen it could likely be used by an unauthorized person. But if my biometric device, which can only be activated with my fingerprint, is lost or stolen, it is highly unlikely that anyone can use it. So, while we would always want to revoke the credentials associated with my biometric device, the urgency is much lower.
"Privaris has made personal biometric solutions portable and simpler to implement. The mini device from Privaris compares fingerprint with personal templates to grant secured access while ensuring integration with existing physical and logical security systems."
Rake Narang, Editor-in-chief, Info Security Products Guide
Rake Narang: How has Privaris kept up with innovation? What makes Privaris’ biometric solutions different from others? How does Privaris plan to grow further in 2008?
John Petze: Privaris is a pioneer in the development of a new and practical approach to the use of biometrics for identity verification – the concept of personal biometrics.
Typically when we think of biometrics an image forms in our minds – an image of biometric readers installed on every door or gate or PC that you want to protect. Users have to enroll their biometric data into some back-end system, and when they want access, they present their finger to a reader which then compares the fingerprint against the image in the database to determine whether that person is allowed access. This is how biometrics have traditionally been implemented.
Privaris has created the concept of personal biometrics with the development of a biometric reader that fits on your key chain. It’s a small key fob device, called plusID, that performs all biometric processing internally, eliminating the need for a biometric database and the associated need for users to relinquish their most sensitive of personal data.
With plusID, when you want to execute an access transaction, you push a button to turn on your device and then swipe your finger over it. Your fingerprint is compared to your personal template, which is securely stored in your device. If there is a match the device outputs standard credentials (not biometric data) to grant access.
plusID works with what’s in place - existing physical and logical security systems. plusID is compatible with standard access readers for building/facility access (using 125Khz and 13.56 Mhz RFID) and works with standard operating systems like Windows for logon to computers, networks or applications via a simple USB connection – no installation of new equipment, middleware, coding or wiring is required.
Accomplishing this new approach has required innovation in a variety of high technology fields – wireless communications, smart cards, low power high density electronics, encryption and biometrics. plusID products are the result of over three years of innovative R&D.
Our expectation is that demand for a simple and secure approach to biometric identity verification, and particularly one that enables true security convergence, will result in significant growth in 2008.
Rake Narang: Will the security vendors always be playing a catch-up game with hackers and attackers? How do you see the security products evolving 2-3 years from today? John Petze: I do not believe that security technology vendors are doomed to playing catch up. Yes, hackers will always work to find weaknesses in current approaches and implementations. As security technology matures those weaknesses will be reduced. The key role of security vendors is to change the game by developing entirely new approaches to security, identity verification, user authentication, etc. and continually raise the bar to make it more cumbersome for unauthorized users.
Over the next two to three years I believe that you will see high security products become less complex to use and less disruptive to install – more woven into the fabric of applications and products as opposed to being add-ons. Ask any CSO, the best security solutions are the ones that people will use. Ease of use is a key factor in driving adoption. So convenience and practicality for both employees and the organization will continue to define the most effective enhanced security products.
All About Privaris Head Office Address: 650 Peter Jefferson Parkway, Suite 330, Charlottesville, VA, 22911 Founded in: 2001 CEO: John Petze Public or Private: Private Investors: Noro-Moseley, Red Shift Ventures, Harbert Venture Partners, River Cities Capital. Number of Employees: 23 Products: plusID 60, 75 and 90 Company’s Goals: To be the leader in identity verification solutions that are simple to use, secure and maintain user privacy. Awards Won: plusID wonInfo Security Products Guide’s “Tomorrow's Technology Today” Award, August 15, 2007
