問50
頻出度★★★
バイオメトリクス認証に該当するものはどれか。
平成25年度 秋期 ITパスポート試験 問50
This question's explanation and your answers so far.
解説
問 50
Incorrectア
Incorrect. Here a person only visually checks something you have, namely an ID card with a printed face photo and a built-in IC chip; no device reads and matches the person's biometric characteristics. The card can be handed to someone else or forged, and the basis of the authentication is merely possession of the card plus a visual check of its printed surface. With the same face, if a face-authentication device measured facial feature values and matched them, that would be biometric authentication; but this choice stops at visual inspection, so it does not qualify.
Incorrectイ
Incorrect. Authentication with a user ID and password relies on information that only the person should know, that is, something memorized (What you know), so it is knowledge-based authentication and uses no biometric characteristics at all. Even though the values differ for each individual, that only means each person is assigned a separate identifier and secret; it does not make it authentication by physical characteristics.
- ウ
正解 The correct answer is ウ. Biometric authentication verifies a person by reading physical or behavioral characteristics unique to that person, such as fingerprints, palm veins, irises, faces, voiceprints, or signature handwriting. Choice ウ, authentication by holding one's palm over a reader, is a mechanism in which the reader measures the vein pattern (or palm print) of the palm itself, a physical characteristic, and matches it; this is exactly biometric authentication. In terms of the three authentication factors, the deciding point is that it uses neither something memorized (What you know) nor something possessed (What you have), but biometric information (What you are). Because biometric information cannot be separated from the person, it is hard to steal or lend out, and there is nothing to forget.
Incorrectエ
Incorrect. A mechanism that has you read distorted characters that humans can distinguish but machines cannot is called CAPTCHA, and it exists to judge whether the operator is a human or a program (a bot). It does not identify which specific individual a person is, and it measures no physical characteristics, so it is not biometric authentication.
ここがポイント
- Biometric authentication = a method that verifies a person using physical or behavioral characteristics unique to that person, such as fingerprints, palm veins, irises, faces, voiceprints, or handwriting.
- Distinguish the three authentication factors: something you know (What you know: password) / something you have (What you have: IC card, token) / something you are (What you are: biometric information). Note too that CAPTCHA judges whether the other side is a human or a bot; it is not personal authentication.
用語