Modern working life has changed dramatically in the last decade. Driven by the growth of a millennial workforce, working behaviours and communications are more agile, digital and mobile than ever before. Remote working has risen 140% since 2005, a figure that will undoubtedly continue to rise in light of the pandemic. And its benefits are well studied: people are more productive, more motivated, and report a better work-life balance.

The traditional office space and the digital collaborative working platforms we access both inside and outside of “work” have changed. In turn, there is a requirement for increasingly sophisticated access control and security products and systems. Today, and in the future, biometrics can play a crucial role in empowering workplaces both physically and digitally. 

Biometrics: accessing the right area

Physical access and alarm systems are the first, and perhaps the most obvious area, biometrics is securing workplace access control – whether it’s to access office buildings, manufacturing floors, or even private rooms and safes.

The humble key is easily lost and stolen, yet still represents 80% of door lock security

The humble key is easily lost and stolen, yet still represents 80% of door lock security. And while digital solutions are gaining traction, PIN entry not only offers a poor UX, but requires close management, given its vulnerability to loss and misuse. Access fobs and badges pose similar challenges. Say, for example, an employee loses his badge to a restricted lab or highly confidential development centre on his commute - the security of the building is instantly compromised.

By adding biometric authentication to cards or fobs, employers need no longer worry about them falling into the wrong hands. Without the correct user to authenticate, access to buildings, business operations and company files remain secure without needing to update any management systems. Moreover, by using this personal ‘on-device’ approach, employees no longer need to worry about the hygiene of shared sensors or PIN pads. Meanwhile, businesses can also avoid the technical and legal challenges of needing to manage a biometric database. A win-win.

Touchless access

Touch-free biometric solutions are another compelling way biometrics can not only improve security, but the user-experience and personalisation of security systems. Today, many touchless authentication solutions are combining the strong security of iris authentication with facial recognition to offer a compelling balance of security and convenience. This combination also means a reduction in false rejection due to physical changes, as it continues to authenticate even when wearing sunglasses, face masks or in bright sunlight, for example.

Touchless solutions can bring benefits to numerous use cases and settings. Firstly, they can be utilized for mobile credential authentication on personal devices for seamless access to company servers, apps, or VPNs. It can also be implemented in traditional physical settings, offering the capability to alter access rights for personnel too. An R&D lab or healthcare setting is a good example here where restricted access to areas is in high demand, but would also benefit from a hands-free, seamless entry. 

OK computer

Computers and laptops sit at the heart of the modern-day business set-up – whether at home, in the office, or on the move. In parallel, the evolution of modern working behavior changes has seen the number of applications, cloud-based services and shared VPN drives used reach an all-time high. While the benefits are numerous, the extensive PIN and password management that accompanies this is problematic.

6 out of 10 users felt they had too many passwords

For users, they are a source of frustration and anxiety – our research found 6 out of 10 felt they had too many passwords, and worried about forgetting them. In turn, many are all too familiar with the laborious process of setting a complex password, forgetting it, and needing to reset again after several failed attempts. While complex password requirements (such as requiring capitals, numbers, and special characters) mitigate risk in theory, in practice they create a major point of friction in the user experience and require significant management. 

From a business perspective, security and cost concerns are even greater. Microsoft reportedly spends around $12 million a month on forgotten passwords. Worryingly, workplace security breaches are increasing too, with 54% of IT professionals reporting an increase in phishing attacks according to a recent Mimecast report. Here, the end-user is usually the weakest link due to easily guessed passwords, complacency, and the use of the same password across multiple apps and accounts.

Biometric authentication via unique personal devices such as USB dongles, or by utilizing on-device authentication on a smartphone offers simple and frictionless way to increase security for the enterprise, free up IT teams and offer a better user experience to employees. FIDO-certified solutions are just one compelling solution supporting this. Plus, biometrics can also be used to authorize selected employees to access restricted areas of an organization’s network, protecting confidentiality. Meanwhile, with 80% of smartphones now featuring some form of biometrics, utilising biometric authentication for smartphone applications in the workplace can also be done at a relatively low-cost investment.  

Getting personal

With more flexible working in place, many workplaces now operate a ‘hot desk’ system or share devices such as printers between colleagues. This is another instance where biometrics can be used to simplify access to personalized settings or employee accounts.

In the future, this could even be integrated into wider office use cases, such as personalizing the air conditioning preference in meeting rooms or unlocking your personal settings on the coffee machine with a simple touch or gesture.

More with multimodality

Multimodality layers more than one type of biometric authentication to increase security and improve functionality and ease of use. For example, combining fingerprint with facial or iris to verify someone’s rights to access a secure manufacturing floor. While spoofing a fingerprint is challenging enough, spoofing a fingerprint and iris at the same time is near impossible. What’s more, by combining more than one modality, access control product manufacturers can reduce the false rejection rate (FRR) to deliver even smoother experiences.

Secure, seamless authentication

For enterprises, adding biometrics needn’t be a full ‘rip and replace’ solution. In fact, it can be added as a complement to existing solutions for added security without creating additional user friction. A biometric card or key fob can replace existing contactless access cards without big investments, or a biometric USB dongle can be added to email or VPN login to significantly enhance security, without infringing ease of use.

A biometric card or key fob can replace existing contactless access cards without big investments

To meet this demand, our access control service and solution partners are integrating biometrics for a wide range of physical and logical use cases. It’ll be unsurprising that locks and alarms are top of the list, but with the rise of widespread remote working over the last 10 years and the fight against PINs and passwords being led by organizations like FIDO, logical access for VPNs and work and time attendance, for example, are coming to the fore. 

Overall, biometrics can not only play a role in securing the modern workplace (wherever that may be), but can also give time and money back to IT and security teams. Most importantly, it can be a tool to empower workforces, driving efficiency and productivity through improved convenience and greater flexibility over how, when and where they work.

Share with LinkedIn Share with Twitter Share with Facebook Share with Facebook
Download PDF version

Author profile

Michel Roig Senior VP, Head of Busines Line Payments & Access, Fingerprint Cards AB

In case you missed it

HID Global Pilot Program Demonstrates Social Distancing and Contact Tracing
HID Global Pilot Program Demonstrates Social Distancing and Contact Tracing

If one employee stands less than six feet away from another employee, a fob attached to a lanyard around his or her neck emits an auditory beep – an immediate reminder to observe social distancing. If an employee were to be diagnosed with COVID-19, a cloud-based database provides a record of who at the company the sick employee had contact with. These capabilities of HID Location Services ensure social distancing and provide contact tracing to enable companies to return to work safely. They have been deployed in a pilot program at HID Global’s Corporate Headquarters in Austin, Texas. Social distancing using a BLE beacon To ensure social distancing, a Bluetooth Low Energy (BLE) beacon is emitted from an employee’s fob (or from a badge that has the same functionality). The beacon communicates peer-to-peer with a beacon emitted by another employee’s fob or badge to alert if the location of the two employees is less than six feet apart. To ensure social distancing, a Bluetooth Low Energy (BLE) beacon is emitted from an employee’s fob For contact tracing, the beacons communicate via a nearby “reader” (a BluFi BLE-to-Wi-Fi gateway) to the Bluzone cloud-based software-as-a-service. The building area covered by each reader constitutes a “zone,” and the system records when two beacons are signaling from the same zone, which indicates contact between employees. In effect, the system records – historically and forensically – who was near whom (and for how long) using the zone-based approach. “In the workplace, we provide organizations with visibility into the location of their workforce,” says Mark Robinton, Vice President, IoT Services Business Unit at HID Global. Pilot program spans variety of environments By documenting where a sick individual moved in the building, the system also can guide any need to close off a certain area for deep cleaning. Instead of quarantining a whole building, a company could quarantine a small subset of employees who were likely exposed. Importantly, the system only reports data, while management makes the actual decisions about how to respond. The site of the pilot program is the 250,000-square-foot HID Global facility in Austin, which includes a variety of environments, including manufacturing areas, an executive suite, cubicles, a training area, a cafeteria, and lobbies. This spectrum of use cases enables the pilot program to evaluate how the system works in various scenarios. The building in Austin has two floors, plenty of natural lighting and emphasises sustainability in its design. HID Location Services ensure social distancing and provide contact tracing Pilot starts small and expands For the pilot program, 80 readers were installed in a wide area in the facility, including a variety of environments. Initially 30 badges and 30 fobs, all BLE-enabled, were issued to employees. If a badge identifies another nearby beacon (suggesting a social distancing failure), it emits a blinking LED light, which can be seen by the offending co-worker. The fobs emit an audible beep, which employees have overwhelmingly said they prefer. Observers overseeing the pilot program have documented employee reaction and comments. It emits a blinking LED light, which can be seen by the offending co-worker There were challenges in setting up the pilot program remotely to ensure fewer employees were on site during the pandemic. The equipment was provisioned in Florida and then shipped to the Austin location. Fine-tuning was required to adjust the signal strength of the BLE beacons. The badges were initially more powerful, but the strength was dialed back to be comparable to the fobs and within the six-foot social distancing range. Signal strength is also a variable in diverse environments – the 2.4 Ghz signal tends to reflect easily off metal, so adjustments in signal strength are needed in a factory setting, for example, versus a collection of cubicles.   “This facility is large enough and diverse enough that it provides great test results and quality data to analyze,” says Dean Young, Physical Security Manager at HID Global. “Our employees are eager to be part of the pilot to demonstrate that we use the technologies we provide to our customers, and they want to help us stay in compliance with social distancing and contact tracing.” Ensuring privacy while protecting employees HID Global’s headquarters had approximately 425 employees before the coronavirus pandemic lowered the number drastically to include only essential workers. As more people return to work, additional fobs and badges are being issued to expand the scope of the pilot program. The program is also incorporating contact tracing of suppliers and others who visit the facility. Except when triggered by contact among employees, locations are not recorded. Each employee’s location is always available in real-time (e.g. in case of an emergency), but they are not “tracked.” Through BluFi placement and geofence capabilities, the system closes off private areas where location should not be monitored, such as a rest room. Geofencing also identifies when employees enter and/or exit the area covered by the pilot program. Although each beacon is associated with an employee, the employee’s identity is not part of the data stored in the cloud, so there are no privacy concerns. Data is completely anonymized, and no personally identifiable information (PII) is stored in Bluzone. Other computer systems in a company, such as a human resources (HR) program, can privately and securely store the identities associated with each beacon.   Other applications for HID location services In addition to social distancing and contact tracing applications, HID Location Services offer other use cases ranging from asset tracking and employee safety/security to location analytics. For example, the system can analyze room usage for better building management and operational efficiency. It can also quickly find people in emergency situations. These use cases ensure continued value for a system even after concerns about social distancing and contact tracing have faded. The system can analyze room usage for better building management and operational efficiency Another big selling point is the ability of a company to be better prepared in case of a future pandemic, or a second wave of this one, says Robinton. The HID Location Services social distancing and contact tracing applications will be available at the end of Q3 and will be rolled out through HID Global’s existing integrator channel. Vertical markets likely to embrace the technology include healthcare, where hospitals need to track patients as they come in and to know which other patients or staff they may have been exposed to. The financial sector is another likely market, as is manufacturing, which is looking to avoid the prospect of shutting down an entire plant. It’s better to address the three or four people who were near a sick employee than to shut down the plant. In the hospitality industry, fobs can be used to signal duress by the housekeeping staff.

Debunking The Myths Of EBT Cameras In A COVID-19 World
Debunking The Myths Of EBT Cameras In A COVID-19 World

The new buzz in the thermal imaging world goes by many names. In a short time, a small niche in the world of IR, which was previously sidelined to make way for more lucrative markets such as security and defence, has taken the top spot in the attention, production and sales for many manufacturers and integrators.  It’s no surprise considering the size of this new market. Suddenly, hotels, cinemas, malls, hospitals, critical services, public transportation, office buildings and more have become consumers of thermal imaging cameras. Along with that, the more traditional markets, such as security, defense and industry are suffering from budget cuts, project cancellations, or postponements. Combine two of these elements, and the new elevated body temperature (EBT) camera market is easily 3-4 times the size of the other markets combined. Thermal imaging cameras and common misconceptions Can thermal cameras detect viruses?  The answer is NO. The best the camera can do is tell you if someone has a higher skin temperature than others. There are many reasons for an elevated body temperature which are not all health-related, such as exercise or even sitting in a warm environment without air-conditioning. Are the cameras accurate? The accuracy debate is a significant and controversial discussion with much misinformation running around. When discussing accuracy, there are two considerations: The first consideration is the accuracy of the camera itself versus a blackbody. Blackbodies are devices which can regulate temperature very accurately (although not all are equal) and have a high emissivity level, which means they are almost not affected by surrounding heat or energy. All thermal cameras are calibrated against blackbodies. Still, some manufacturers have been using them in their EBT solutions to give the camera a consistent temperature reference to which it can adjust. The accuracy of the camera in this discussion talks about the camera itself. How sensitive the detector is, internal reflections, lens aperture, noise level and the calibration process itself. Also, if you read the fine print, most manufacturers quote accuracy levels which are valid only in a controlled or laboratory environment. As in, a room with a steady 25°C and a slow shift in temperature (not more than 1°C per hour). Most field conditions don’t allow this – so this low level of accuracy is challenging to replicate in practice.Blackbodies are devices which can regulate temperature very accurately The other focuses on the fact we are not looking for COVID in black bodies. We are looking for it in humans. And, the substance known as human skin acts very differently. To date, there are no medical models which can predict how skin will behave in different scenarios. We don’t know what the external skin temperature of a man weighing X who was exposed for X minutes to direct or indirect sunlight would be. So, while the black body may be spot on – it has no bearing on the temperature reading of humans.  So, while we can improve the first issue, the second one is more complicated. One way to circumvent it is by using population statistical analysis and looking for the gradient between the healthy population (which does have existing medical models) to the people with a higher temperature which are statistical anomalies for such a camera. Thermal cameras and their suitability  Are all thermal cameras suitable for temperature readings? There is a difference between a thermal camera and a thermometric camera. A thermal camera developed for security and defence are used to detect threats and give situational awareness. We don’t care that two trees with different temperatures will have different colors – we care about the person standing between them. We manipulate the image, so the viewer has a better understanding of what he sees. With thermometric measurement (as in – thermal temperature reading) we do the exact opposite. We want accurate temperatures readings for each pixel in our screen. A thermometric camera will go through a rigorous calibration together with the lens, which often takes longer. We need to offset, in the calibration tables, minute pixel-sized blemishes in the detector and lens. Those blemishes would be invisible in a thermal image – but can skew the temperature reading and produce inaccurate results. We regularly see suppliers who are using regular thermal cameras with blackbodies to auto adjust the temperature reading as described above. But, if you take that same blackbody and move it a meter to one side, you may discover the camera suddenly registers a different temperature – as not all pixels have a uniform calibration. Does it matter where we scan in humans? Yes and no. The inner canthus of the eye (the tear duct) is the most relevant external point with the best correlation to internal temperature. People looking at the inner canthus will manage to avoid a lot of the effects of ambient temperature on the skin. The tradeoff is that the inner canthus is a tiny area, and people would need to remove their glasses. Most of the world’s health organisations consider the difference between a healthy and sick individual to be 1.5° C (or 2.7° F). That change is consistent whether you’re looking at the tear duct, the forehead or a mouth. Thus, the solutions that look at the gradient temperature (population-based solutions) are just as effective when measuring the ambient temperature on the skin of the population tested.  Do people need to stop in front of the camera? Not necessarily. It depends on the speed of the camera and the temperature detection algorithm. Some cameras can detect people walking very quickly as they only need a few frames to detect the temperature. Will the camera work outdoors? Most outdoor cameras will suffer from false alarms and misses. Some cameras have very advanced compensation algorithms for this, but they can’t take into account all the dynamic temperature changes, humidity, sporadic energy readings and the “bane of thermal imaging” - turbulence. Therefore, the conditions can strain even the most advanced algorithm.  Why invest in this technology? The WHO states, that while asymptomatic transmission exists, it’s much less contagious then symptomatic transmission. Some doctors claim that a person with a fever sheds the virus five times more aggressively than a person with no fever.  There are clear regulations for businesses to screen individuals for fever In some countries, there are clear regulations for businesses to screen individuals for fever as they come into the establishment. While you can have a person in the entrance with a contactless thermometer, they must stop people for a 5-second check each time they come in. That would cause long lines in many places with high traffic. And, during testing, standing less than 2 meters from the individual would throw social distancing out the window. If the tester got sick, the next day they would start endangering everyone else they checked. It’s better to screen automatically and only use the IR thermometer in cases where an alert was triggered and needed to be verified. Various forms of technology  We’ve also seen much use of the IR tablets recently. While they are low cost, a person usually needs to stand very close (less than 1 meter) from the monitor to be caught by the camera. Thus, spreading his germs on the glass or plastic cover of the tablet while being screened.  In conclusion – Thermal EBT cameras are important. They aren’t a miracle cure, and they won’t stop the spread of the virus. And one should be careful of false promises. But along with other solutions (most importantly – masks), they can help protect us during these times and allow the wounded global economy to rejuvenate itself.

Beyond Video Analytics, What Are the Benefits of AI and Machine Learning?
Beyond Video Analytics, What Are the Benefits of AI and Machine Learning?

Artificial intelligence (AI) and machine learning have made a big splash in the physical security market, transforming video analytics to a new level of accuracy. In fact, the terms have become common buzzwords throughout the industry. However, the potential for AI and machine learning to impact the physical security industry goes far beyond their ability to improve video analytics. We asked this week’s Expert Panel Roundtable: Beyond better video analytics, how can artificial intelligence (AI) and/or machine learning benefit the physical security market?