問69
頻出度★★★
バイオメトリクス認証の例として, 適切なものはどれか。
平成26年度 秋期 ITパスポート試験 問69
This question's explanation and your answers so far.
解説
問 69
Incorrectア
A password uses information known only to the person, which falls under authentication by memory (knowledge) among the three authentication factors. It does not use any physical characteristic, so it is not biometric authentication.
Incorrectイ
An ID document uses an object that only the person possesses, which falls under authentication by possession. It belongs to the same category as IC cards and tokens, and it does not match any biometric information.
- ウ
正解 Biometric authentication verifies a person by matching physical or behavioral characteristics that belong to the person themselves — fingerprints, vein patterns, irises, faces, voiceprints, handwriting, and so on. Choice ウ, “Authenticate using the person's fingerprint,” uses exactly such a physical characteristic as the authentication information, making it a typical example of biometric authentication. The correct answer is therefore ウ. A fingerprint differs from person to person and barely changes over a lifetime, so there is little risk of forgetting or leaking it as with a password, and no worry about losing or lending it as with a card.
Incorrectエ
A one-time password is a disposable password valid only for a limited time or a single use; its advantage is that it is hard to reuse even if intercepted, but because it uses a value generated or received by a device the user holds, such as a token or a smartphone, it is mainly authentication by possession. Since it does not use a physical characteristic, it is not biometric authentication.
ここがポイント
- Be able to distinguish the three authentication factors: memory (knowledge, e.g. a password), possession (an object, e.g. an IC card or ID document), and biometrics (e.g. fingerprint, vein, iris, face).
- Concrete examples of biometric authentication include fingerprint, vein pattern, iris, face, and voiceprint authentication. It is unlikely to be lost or forgotten, but you should also remember the trade-off between the false acceptance rate (FAR) and the false rejection rate (FRR), and the fact that biometric information cannot be changed.
用語