[OWASP-HongKong] 2-Factor Authentication with using Biometric

[Anthony, Cheuk Tung, LAI]

Dear all,


Currently, we always use plain text for our password input, you will be
worried about your input is being captured secretly or else.

In addition to password, if we authenticate our identity with our
signature, I believe it exhibits more uniqueness.

Overview of signature-based biometric authentication:
http://www.penflow.com.hk/technology.html

Some vendors like PenFlow has offered a kind of server-based signature
authentication, it may be more prevalent compared with using digital
certificate. The weakness is that it is not widely used and authorized by
government (i.e.she prefers fingerprint) currently.

Please read the biometrics details from here:
http://www.biometrics.org
http://www.tibs.org/


--------------
Regards,
Anthony LAI, CISSP, CISA, OCP, SCWCD
Chapter Leader
OWASP (Hong Kong Chapter)
Web: http://www.owasp.org
Web(HK Chapter): http://www.owasp.org/local/hongkong.html

Aim to promote security awareness to professionals in web development



--------------
Regards,
Anthony LAI, CISSP, CISA, OCP, SCWCD
Chapter Leader
OWASP (Hong Kong Chapter)
Web: http://www.owasp.org
Web(HK Chapter): http://www.owasp.org/local/hongkong.html

Aim to promote security awareness to professionals in web development