Giving fraud the finger: Barclays banks on biometrics for business customers

Giving fraud the finger: Barclays banks on biometrics for business customers

Summary: Bank will offer finger vein biometric readers to business customers – could a consumer rollout be next?


Barclays is to begin offering finger vein biometric readers to its business customers in an attempt to cut fraud, and is exploring how the technology could be extended to consumers.

The bank will offer the readers, based on Hitachi's VeinID finger vein authentication technology, to corporate banking customers from next year.

After they have registered their details, business customers — for example, those in finance departments who might be making payments worth millions of pounds — will be able to easily access their online bank accounts and authorise payments within seconds by scanning their finger, without using passwords or other authentication code.

The bank said the introduction of the technology is a response to clients' concerns about the threat of online fraud.

Barclays head of cash management Michael Mueller said that sometimes customers share PINs and passwords which represents a security risk, but in contrast "your finger is unique".

Barclays' new biometric reader. Image: Barclays.

"Typically when you upgrade security you introduce complexity to the workflow... this doesn't do any of that," he added.

Barclays said that unlike fingerprints, vein patterns are extremely difficult to spoof — because they're internal structures they are harder to copy. Also, unlike fingerprints, vein patterns can't be left behind on hardware.

The finger being scanned must be attached to a live human body in order for the veins in the finger to be authenticated, the bank said. The false acceptance rate for the system is one in one million, while the false reject rate is one in ten thousand, it added.

The vein pattern data is stored in the biometric reader, which means the bank will not have access to it and there is no public record of it.

Hitachi's VeinID is already used on ATM transactions in Japan but the bank said the combination of vein biometric and secure digital signature technology in the Barclays biometric reader is a new departure.

The bank said there is future potential for it to be introduced more widely in UK branch networks, potentially bringing biometrics to millions of consumers.

When asked how long it would be before this technology was available on cash machines, Ashok Vaswani, CEO of Barclays Personal and Corporate Banking, said: "We are working with Hitachi to see how this can be taken to the next level... biometrics is the way to go in the future there's no question about that we are committed to that type of platform."

The launch of the finger vein reading technology follows on from the bank's rollout of voice biometrics for Barclays Wealth customers to identify themselves on phone calls, doing away with the need for passwords or security questions.

Further reading

Topics: Security, Emerging Tech, United Kingdom

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to join the discussion
  • Could This Be It?

    I think we are poised for a dramatic shift in web/computer security. Face it the pin and password system is not working. For now it is the best alterative. I am not sure the device in this article is the one. When it happens I expect a shift to occur rapidly. Maybe even in a less than one year time frame. What really scares me is the event that causes the shift.
    • It's only a key

      This is just a variation of the one time password systems replacing a PIN with a biometric sensor. This provides a much better key with less fuss but the security is still only as good as the building. One problem is how do you handle problems or issuing the key? When we use them at work, we have a security office which verifies our identity before issuing a device and handles replacements if there's a problem. People want more convenience than that if they're not handling large business transactions.
      Buster Friendly