バイオメトリクス認証の例として, 適切なものはどれか。
平成29年度 秋期 ITパスポート試験 問71
This question's explanation and your answers so far.
問 71
- ア
正解 Biometric authentication reads a person's own physical or behavioral traits — such as fingerprint, face, iris, vein pattern, or voiceprint — to verify their identity. Option ア, “authenticate using the person's fingerprint,” uses the fingerprint, which is a physical trait, so it is a typical example of biometric authentication and is the correct answer. Because biometric authentication relies on a trait of who the person is (something you are), such a trait is hard to steal, lend, or share, which is its advantage.
Incorrectイ
Authentication with a digital certificate uses certificate data that the person “possesses,” and it is based on public-key cryptography. It does not use physical traits, so it is not biometric authentication.
Incorrectウ
Authentication with an ID card is a method in which the person presents an object they “possess,” such as a card, for verification (possession-based authentication). It does not read physical traits, so it is not biometric authentication.
Incorrectエ
A one-time password uses a single-use, disposable password, and it is authentication based on information the person “knows / possesses.” It does not use physical traits, so it is not biometric authentication.
- Distinguish the three factors of authentication: knowledge (something you know, e.g., a password), possession (something you have, e.g., an IC card or certificate), and biometrics (a physical trait of the person, e.g., fingerprint or face).
- Biometric authentication = an identity-verification method that uses physical or behavioral traits such as fingerprint, face, iris, vein pattern, or voiceprint.