ITPEC IP October 2019 Question 43

Matching the vein pattern of a hand against the registered one — biometric authentication identifies a person by a physical or behavioural characteristic of the body.

Authentication uses three kinds of factor: something you know (password, PIN, a pattern), something you have (IC card, token) and something you are (biometrics). Palm or finger veins, fingerprints, iris, face and voice are physical traits; signature dynamics are behavioural. The ATM reads the vein pattern with a sensor and compares it with the pattern registered earlier.

Answer (a)

Why not others:

• •(b) — a stroke pattern drawn on the screen is something the user remembers, a form of password (knowledge authentication)
• •(c) — a question a machine can hardly answer, such as picking outdoor photos, is a CAPTCHA: it checks that a human is operating, not who the person is
• •(d) — picking photos of one's own relatives relies on what the user knows and recognises (image-based knowledge authentication), not on a measured body trait

Key rule: Biometrics measures the body or its behaviour; a pattern or chosen images is still something the user knows, and a CAPTCHA only tells humans from bots.

Security · AI-written, may contain errors