Introduction

Securing the critical infrastructure in the United States requires authentication of people authorized to access the critical systems. These controls can regulate personal access to the physical sites housing the power stations, water facilities, or gas lines encompassing the critical infrastructure, or they may regulate access to either the remote or centralized systems comprising the SCADA networks. Limiting access to authorized personal has been a cornerstone of infrastructure security since its inception.

Technology now exists to tie the authentication of authorized individuals (and the exclusion of unauthorized people) directly to the physical being of the people seeking access. This is managed through a process called biometric security, which measures some physical aspect of any person seeking access to a sensitive element and reconfirms that physical aspect at the time access is requested. The biometric system may measure a person's fingerprints, finger length and shape, head shape or facial features – any one or more of an infinite number of human body features – to confirm whether that person is the same one who has previously received authorization to enter the sensitive computer system or restricted area.