Skip to main content

Biometric Login

Biometric authentication · Biometric identification
Tags:

Examples​

Face ID setup in iPadOS: the system guides the user through enrolling their face as a biometric authentication factor.

Description​

A component that lets users identify themselves to the system through unique physical or behavioral characteristics (fingerprint, facial recognition, iris, voice). Unlike traditional credentials, which the user "knows" (a password) or "has" (a device), biometric authentication relies on what the user "is". The system captures the biometric trait, processes it, and compares it against previously enrolled templates to validate the identity.

Mandatory capabilities​

Mandatory capabilities
  • Captures physical or behavioral characteristics of the user through specialized hardware (fingerprint sensor, camera, microphone)
  • Converts the captured characteristics into digital representations (biometric templates) for comparison
  • Compares the capture against previously enrolled templates to determine whether the identity matches

Additional capabilities​

Additional capabilities
  • Operation as an additional factor (multi-factor): the component works together with another form of authentication (password, token), adding a biometric layer to an existing flow instead of replacing it
  • Fallback authentication: lets the user authenticate through a non-biometric mechanism (PIN, password) when biometric verification fails or is unavailable
  • Liveness detection (anti-spoofing): processes the biometric capture to verify that it comes from a real person and not from an image, a video, or a replica of the trait

Boundaries​

What it is not
  • Does not include the initial registration of the biometric trait (enrollment), which is part of user management
  • Does not handle authorization or permissions after authentication
  • Is not applicable to programmatic authentication between systems
  • Requires specific technical infrastructure (sensors, matching algorithms) not present in traditional systems

Information flow​

Input

The user's biometric data (fingerprint image, facial scan, voice sample)

→
Output

Authenticated session or access denial, depending on the match with the enrolled template

Variants​

  • Fingerprint: scanning and comparison of the unique patterns of the fingerprint
  • Facial recognition: analysis of facial features through a camera
  • Iris recognition: identification through the unique patterns of the iris
  • Voice recognition: authentication through characteristic vocal patterns

Typical dependencies​

  • Suitable hardware (fingerprint sensor, camera for facial recognition, iris scanner)
  • Biometric comparison engine (matching algorithms)
  • Repository of enrolled biometric templates (Database)
  • Session or token manager to maintain authentication after verification
  • Fallback authentication mechanism for cases of biometric failure (Login Form)

Mapping to the Digital Board​

Manual UpdateNo
Automatic UpdateNo
Data ConceptsAlways
On-Demand OutputsNo
Automatic OutputsOptional
Autonomous ProcessesOptional
SectionRelationshipNotes
Manual UpdateNoThe capture of the biometric trait is transient input used to verify identity; it does not store or modify persistent system data.
Automatic UpdateNo—
Data ConceptsAlwaysThe enrolled biometric template and the User it belongs to.
On-Demand OutputsNo—
Automatic OutputsOptionalNotification to the user about failed access attempts or attempts from unrecognized devices.
Autonomous ProcessesOptionalLiveness detection (anti-spoofing), when that capability is present.

Digital Board example​

Manual Update
—
Data Concepts
User
Facial Template
On-Demand Outputs
—
Automatic Update
—
Autonomous Processes
Liveness detection (anti-spoofing)
Automatic Outputs
Failed attempt email notification