Connect with us

E-Business

Security: How Your Fingerprints Are Used

Published

on

Greg Sarrail
Kindly share this post

Your fingers have never been more important – they can unlock doors, open phones and even secure your savings, explains Greg Sarrail, Vice President, Solutions Business Development, Biometrics, HID Global in this article exclusive to Nigeria CommunicationsWeek.

Fingerprint scanners are considered the second most popular biometric devices by consumers around the world according to research undertaken by the 2016 Future Password Index. This research was defined by how interested people were in using fingerprints to verify their identity when handling their devices, banking and other forms of security.

Fingerprint biometrics saw a steady rise in popularity from 2014 to 2016 and remains one of the most trusted on the market today.

It is a trend that isn’t going to change anytime soon and this is further underscored by the rise in fingerprint scanners, ATMs, devices and solutions. Your fingerprint has become a coded key that only you can wield.

People are being asked for their fingerprints on a daily basis. When you go to work, transact at your bank, and when you apply for certain government documents.

Biometrics even play a fundamental role in the criminal justice system. However, not all biometric systems are created equal. There are important differences between specific systems, their capabilities, the data they access and the data they share.

Some biometric solutions are not linked to a shared network, so you could transact at your bank or enter your office park with your unique identity, but this information will not be shared anywhere else. The data is captured and secured by each individual system to ensure absolute security and controlled access.

In addition, it is important to know the difference between biometric verification and biometric identification as their applications vary, as do their relevance to your security. When undertaking biometric identification, you are asking – ‘Who am I?’

Whereas with biometric verification you are asking – ‘Am I who I claim to be?’ For example, once your fingerprint has been submitted to a specific database, an identification application would compare it against a larger database of fingerprints that are associated with identities. If your fingerprint is found within that database, then the question of ‘Who am I?’ has been answered.  This is biometric identification in a very simple nutshell.

When it comes to biometric verification and proving an identity, there is a need to add in some extra factors that can support the process and make it more secure. These can be account numbers, credit cards, or even smart devices.

The system then pulls up the biometric data associated with your fingerprint and attempts to make a match. It’s important to note that the verification process doesn’t examine all fingerprint data for all users to find a match. Instead it checks to see if the fingerprint template that’s presented to the system is the same one that was originally enrolled, and it provides a quick answer.

Biometric verification is very quick and is often used in commercial applications. It is private and efficient and often requires two-factor authentication – something you have or know plus your fingerprint that identifies who you are.

Enrolling and verifying individuals using this process doesn’t demand huge processing power and is ideally suited to the growing trend in enterprise mobility.

Users can simply store their own biometric data on their own devices for privacy, portability and convenience. Of the two types of biometric application, this is the simplest and most easily found on smaller devices and has recently grown in popularity within the consumer space.

When you use your finger to access your phone, this is defined as biometric verification. The device uses your singular print stored in its database to confirm that you are who you claim to be, further backed up by passwords and PIN numbers.

Biometric identification is more complex and requires a system that’s advanced and comprehensive. An example of this would be when you access your bank account using a biometric pad at the teller, or when you are applying for specific government papers and the system checks your fingerprint against a vast database of prints and identities.

Biometric verification is the hurdle you jump to prove that you are who you say you are, biometric identification is when a system identifies you from within a vast database.

Both systems are invaluable when it comes to protecting your identity and assets, but the latter demands a level of sophistication in technology to manage a significantly larger database and it is prohibitive for more basic devices and biometric systems.

Whether you are about to use biometrics to identify or verify, your fingerprint remains your own proof of who you are. It is unique to you and you alone, and it is your highly personalised key to unlocking your world.

 Quoted sources: http://www.paymentscardsandmobile.com/consumer-demand-banks-adopt-biometric-technology-doubles/

 

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Nigerian Terra Industries Secures $11.8m for Expansion

Published

on

Kindly share this post

Terra Industries, a Nigerian defence technology startup, has raised $11.75 million to expand its development of defensive systems that protect critical facilities across Africa.

The fundraising round was led by Silicon Valley venture firm 8VC, which was founded by Palantir co-founder Joe Lonsdale.

Other investors in the round include Valour Equity Partners, Lux Capital, SV Angel, and Nova Global, as well as African-focused funds Tofino Capital, Kaleo Ventures, and DFS Lab.

Terra Industries, founded in Abuja by Nathan Nwachuku and Maxwell Maduka, provides multi-domain security solutions for both air and land. Its solutions are intended to detect and respond to threats including terrorism, sabotage, and armed attacks on infrastructure.

The company’s product portfolio includes surveillance drones, ground-based robotic systems, and fixed monitoring towers deployed around sensitive locations.

Co-founder and CEO Nathan Nwachuku said the company has now fully embraced its identity as a defence-focused startup, citing the growing urgency of security challenges across Africa.

He said safeguarding critical infrastructure from terrorist threats has become unavoidable.

Nwachuku argues that protecting Africa’s infrastructure requires a different approach, one that combines local manufacturing, end-to-end system control, and software capable of independently identifying and responding to threats over large areas.

The company aims to position itself as a defence prime, similar to the role played by firms such as Anduril Industries and Palantir in the United States.

Nwachuku also disclosed that the company had earlier raised $800,000 in pre-seed funding.

With the new funding, Terra plans to increase manufacturing capacity within Africa, establish additional defence production facilities, and expand its artificial intelligence and software teams.

While software offices are planned for San Francisco and London, the company said manufacturing operations will remain on the continent.

 


Kindly share this post
Continue Reading

E-Business

Cybersecurity Firm Warns Telecom Threats from 2025 will Carry into 2026 as New Technology Adds New Risk

Published

on

Kindly share this post

Kaspersky Security Bulletin reviews what shaped telecom cybersecurity in 2025 and what is likely to persist in 2026. Advanced Persistent Threat (APT) activity, supply-chain compromise, DDoS disruption and SIM-enabled fraud continued to pressure operators in 2025, while newer technology deployments introduce additional operational risk.

In 2025, telecom operators faced four broad threat categories. Targeted intrusions (APTs) continued to focus on gaining stealthy access to operator environments for long-term espionage and leverage through privileged network positioning.

Supply chain vulnerabilities remained an entry point: telecom ecosystems rely on many vendors, contractors and tightly integrated platforms, so weaknesses in widely used software and services can provide a path into operator networks. Finally, DDoS remained a practical availability and capacity problem.

Kaspersky Security Network showed that last year, between November 2024 and October 2025, 12,79% of users in the telecommunications sector encountered web threats and 20,76% faced on-device threats. 9,86% of telecom organisations worldwide experienced ransomware.

At the same time, the telecommunications sector is moving from rapid technological development to broad implementation — and the report argues that this shift creates new opportunities and new operational risks for 2026.

Kaspersky highlights three areas where technology transitions could introduce disruption if rolled out unevenly or without strong controls: AI-assisted network management, where automation can amplify configuration errors or act on misleading data; post-quantum cryptography transitions, where rushed deployment of hybrid and post-quantum approaches could cause interoperability and performance issues across IT, management and interconnect environments; and 5G-to-satellite integration (NTN), where expanding service footprints and partner dependencies introduce new integration points and potential failure modes.

“The threats that dominated 2025 — APT campaigns, supply chain attacks, DDoS floods — aren’t going away. But now they intersect with operational risks from AI automation, quantum-ready cryptography, and satellite integration.

Telecom operators need visibility across both dimensions: maintaining strong defences against known threats while building security into these new technologies from day one. The key is continuous threat intelligence that spans from endpoint to edge to orbit,” said Leonid Bezvershenko, senior security researcher at Kaspersky Global Research & Analysis Team.

 


Kindly share this post
Continue Reading

E-Business

Study Reveals 88.5% of Phishing Attacks Focus on Stealing Account Credentials

Published

on

Kindly share this post

Kaspersky analysed phishing and scam campaigns observed from January through September 2025 and found that 88.5% of attacks globally sought credentials for various online accounts.

Another 9.5% targeted personal data such as names, addresses, and dates of birth, while 2% focused on bank card details.

According to data from Kaspersky, over 38 million phishing links were clicked in Africa in the previous year (from November 2024 to October 2025) – all of which were detected and blocked by Kaspersky solutions.

Not everyone uses protective solutions on their devices however, and phishing remains one of the most prevalent cyber threats, with attackers luring users to fake websites where they unwittingly surrender their login credentials, personal information, or bank card details.

Kaspersky research shows that most phishing pages transmit stolen information via email, Telegram bots, or attacker-controlled panels, before it enters underground resale channels.

Data stolen through phishing is rarely used only once: credentials from multiple campaigns are consolidated into data dumps and sold on dark web markets, in some cases for as little as $50. Buyers sort and verify the data to check whether accounts remain active and reusable across different services.

According to Kaspersky Digital Footprint Intelligence, average 2025 prices ranged from $0.90 for global Internet portals to $105 for crypto platforms and $350 for online banking access. Personal documents such as passports or ID cards sold for about $15 on average, with pricing influenced by account age, balance, linked payment methods, and security settings.

As datasets are enriched and combined, attackers can build detailed digital profiles that may later support targeted attacks on executives, finance staff, IT-administrators or individuals with valuable assets or personal documents.

“Our analysis shows that credentials account for nearly 90% of phishing attempts. Once collected, logins, passwords, phone numbers, and personal details are aggregated, checked, and resold, sometimes years after the initial theft.

Combined with new information, even old credentials can enable account takeovers and targeted attacks against both individuals and organisations.

By leveraging open-source intelligence and old breach data, attackers can craft highly personalised scams, turning one-time victims into long-term targets for identity theft, blackmail, or financial fraud,” said Olga Altukhova, senior web content analyst at Kaspersky.


Kindly share this post
Continue Reading

Trending