問90
頻出度★★★
バイオメトリクス認証の例として, 適切なものはどれか。
平成30年度 秋期 ITパスポート試験 問90
This question's explanation and your answers so far.
解説
問 90
- ア
正解 ア is correct. Biometric authentication reads a person's inherent physical or behavioral traits, such as fingerprints, veins, iris, face, or voice, and verifies identity by matching them against pre-registered data. In ア, the user holds a palm over the ATM sensor and it is matched against the registered vein pattern. A vein pattern is an inherent physical trait, making this a classic example of biometric authentication (palm vein authentication). Therefore ア is an appropriate example of biometric authentication.
Incorrectイ
Unlocking the screen by tracing it in a registered order matches a memorized secret, the pattern (order) known only to the user, which is knowledge-based authentication. It uses no physical trait, so it is not biometric authentication.
Incorrectウ
A mechanism that has the user solve a task hard for machines to judge in order to confirm that a human is operating is called CAPTCHA, a bot-prevention measure. It does not verify the identity of a specific individual (authentication) in the first place, so it is not biometric authentication.
Incorrectエ
Having the user select images related to the person, such as relatives, is authentication based on knowledge only the user has (information about personal relationships), a form of knowledge-based authentication. It reads no physical trait, so it is not biometric authentication.
ここがポイント
- Biometric authentication verifies identity using a person's inherent physical or behavioral traits, such as fingerprints, veins, iris, face, or voice. Palm vein authentication is a typical example.
- Authentication factors fall into three types: knowledge (something you know, such as passwords or patterns), possession (something you have, such as an IC card or token), and biometrics (a physical trait). Pattern locks and secret-image selection are knowledge-based authentication and must be distinguished from biometric authentication.
用語