Biometrics technology verifies or identifies a person based on physical characteristics. A biometrics system uses hardware to capture the biometric information, and software to maintain and manage it.

The system translates these measurements into a mathematical, computer-readable format. When a user first creates a biometric profile, known as a template, that template is stored in a database. The biometrics system then compares this template to the new image created every time a user accesses the system.

For an enterprise, biometrics provide value in two ways. First, a biometric device automates entry into secure locations, relieving or at least reducing the need for full-time monitoring by personnel. Second, when rolled into an authentication scheme, biometrics adds a strong layer of verification for user names and passwords.

Biometrics adds a unique identifier to network authentication, one that's extremely difficult to duplicate (though not impossible, as I'll discuss in the fingerprint scan section). Smart cards and tokens also provide a unique identifier, but biometrics has an advantage over these devices: a user can't lose or forget his or her fingerprint, retina, or voice.