FIPS PUB 48 : 0

Executive Overview
1. Introduction
   1.1 Need for Personal identification
   1.2 "Absolute" Identification Versus Verification of
        Identification
2. Three Basic Methods of Establishing Identity
   2.1 Something KNOWN to an Individual
   2.2 Something POSSESSED by an Individual
   2.3 Something ABOUT an Individual
3. Personal Identification by Means of Physiological Attributes
   3.1 Appearances
   3.2 Signatures
   3.3 Fingerprints
   3.4 Hand Geometry
   3.5 Voiceprints
   3.6 Other Attributes
4. The Accept/Reject Decision
   4.1 Determination of False Alarm Rate (FAR)
   4.2 Determination of Imposter Pass Rate (IPR)
   4.3 Combined Test for FAR and IPR
   4.4 Effect on FAR and IPR of Allowing Multiple Attempts
   4.5 Combining of Personal Identification Methods
5. Evaluation Criteria
   5.1 Resistance to Decent
   5.2 Counterfeiting of Artifacts
   5.3 Susceptibility to Circumvention
   5.4 Time to Achieve Recognition
   5.5 Convenience to Use
   5.6 Cost of Recognition Device
   5.7 Interfacing of Device for Intended Purpose
   5.8 Time and Efforts Involved in Updating
   5.9 Processing Required in Computer Systems
   5.10 Reliability and Maintainability
   5.11 Cost of Protection the Device
   5.12 Cost of Distribution and Logistical Support
6. System Considerations
   6.1 Unauthorized Users versus Unauthorized Usage
   6.2 Duress or Hostage Alarm
   6.3 Establishing and Checking Authorization
   6.4 Auditing of System Access
   6.5 Encryption
   Bibliography