
is known as ‘‘match-on-PC’’ readers. Instead, the au-
thentication algorithm is implemented as a computer
software and distributed together with the finger vein
reader. The software is installed to the host PC before-
hand, where the enrollment and authentication pro-
cesses are executed. Since the match-on-PC finger vein
readers do not need a powerful processor, the cost of
the hardware is relatively low compared with the other
two kinds of finger vein readers. Due to the low power
consumption, most of the match-on-PC devices can be
driven by the 5 volts power supplied through the uni-
versal serial bus (USB) interface, which contributes to
the compactness and the portability of the device. Since
the turn-around time of the authentication process is
dependent on the host PC’s CPU power and the com-
munication speed of the interface, the throughput of the
entire system may vary. Although the match-on-PC
readers are widely used for the purpose of logical access
control (e.g., PC log-in), they are increasingly coming
into use for physical access control applications.
The second category is called ‘‘match-on-device’’
finger vein readers. The matc h-on-device reader is
equipped with a CPU that executes both enrollment
and authentication processes inside the reader itself.
The authentication algorithm is implemented in firm-
ware and is typically encrypted when stored on a non-
volatile static memory. One of the biggest advantages of
this system is that all algorithms and data required for
biometric authentication are enclosed in a
▶ tamper-
proof casing and completely separated from the out-
side world. Since all biometric data and algorithms can
be stored inside of the finger vein reader, the risk of
hacking is minimal. Another advantage of this system
is that the match-on-device finger vein readers do not
require high-performance host PCs. In most cases, a
low-performance CPU is enough to communicate and
control the match-on-device finger vein reader, which
makes it possible to integrate cost-effective systems.
The data communications between the host PC and
the finger vein reader are limited because no biometric
data is needed to transfer and therefore no high-speed
interface/network is required. The unit price of these
readers tends to be higher than the match-on-PC read-
ers; however, the match-on-device readers can be used
for a w ide range of applications as they are suitable
for both high-securit y systems and low-cost systems.
Typical applications of the match-on-device readers
include banking systems and physical access control
systems.
The third category is known as
▶ match-on-card
finger vein readers. The authentication algorithm is
implemented as smart card application software and
securely stored onto a smart card together with bio-
metric templates. Upon the host PC’s request, the
match-on-card finger vein reader extracts the biomet-
ric feature of the presented finger and sends an authen-
tication command to the smart card together with the
features. The smart card then executes the authentica-
tion algorithm on its own CPU embedded inside and
evaluates the features transmitted by the finger vein
reader. After the smart card determines whether the
presented finger matches with the pre-enrolled tem-
plate, it transmits a response back to the host PC
through the reader. One of the benefits of using the
match-on-card system is its high security feature. Both
the authentication algorithm and the template data are
securely stored on a smart card that is inaccessible
without taking validation procedures using Secure Ap-
plication Module (SAM). Since these data is never
transmitted outside the card, the risk of template du-
plication is extremely low. From a viewpoint of system
administration, the risk management cost of the
match-on-card system can be dram atically suppressed
because the system does not need to provide protec-
tion for the template data (the card holders are respon-
sible for their own templates, instead). Though the
authentication processing time is slig htly longer than
other two kinds of readers (this is because the smart
card CPUs are slower than the embedded CPUs or
PCs), it does not make much difference especially for
its primary usage, verification. For these reasons,
match-on-card finger vein systems are currently the
most popular biometric banking solution in Japan.
Security Features
Some finger vein readers have a security measure called
▶ liveness detection. It is very important for biometric
systems in general to ensure that the enrolled biometric
patterns are genuine. If a biometric device accepts any
artifact mistakenly and enroll it as a genuine template,
that can be used just like a normal key that can be used
by anyone; if this happens, the security level of the
biometric system becomes no higher than convention-
al keys and locks. In the actual applications, enrollment
procedures typically require an administrator to be
present (who will never allow users to enroll artifacts);
Finger Vein Reader
F
435
F