バイオメトリクス認証に関する記述として,適切なものはどれか。
平成27年度 秋期 ITパスポート試験 問59
This question's explanation and your answers so far.
問 59
Incorrectア
If the tolerance for matching errors is increased, even a person who is not the legitimate one is more easily judged as a match, so the False Rejection Rate (FRR) goes down while the False Acceptance Rate (FAR) goes up. The two form a trade-off that moves in opposite directions, so they can never both become smaller; therefore this option is wrong.
- イ
正解 The correct answer is イ. Biometric authentication matches physical features themselves, such as fingerprints, veins, the retina, or the face, so the user does not need to memorize an ID or password, nor to carry a key or IC card. Its greatest advantage is being able to prove one’s own identity with the body, which avoids the risks of forgetting a memorized secret or of loss and theft. Therefore the statement in イ is appropriate.
Incorrectウ
Biometric authentication can be combined with other authentication methods such as passwords or tokens to form multi-factor authentication. In fact, it is often used together with them to raise the strength, so the claim that it “cannot be used in combination” is wrong.
Incorrectエ
The retina and the vein patterns of the fingers change little over the years and are stable, so they can be used for authentication over a long period. The claim that they change drastically and have a short valid period contradicts the facts and is wrong.
- Biometric authentication uses physical features, so nothing needs to be memorized or carried, and there is no risk of loss or forgetting.
- Raising the tolerance for matching errors (loosening the judgment) lowers the False Rejection Rate (FRR) but raises the False Acceptance Rate (FAR); this trade-off between FRR and FAR is a frequently tested point.