Transcript
Page 1: DSV — questions remain…

Dynamic signature verification (DSV) isthe capture and verification of a signature toconfirm the identity of a user. Thetechnology offers a number of advantagesover other biometrics. People are familiarwith writing their signatures to authorisetransactions, and do not see it as athreatening technology. It can also be veryinexpensive to implement.

The primary reason that interest in DSV isgrowing is not because of algorithmimprovements, but because it is becomingincreasingly easy and possible to capturesignatures, not only from special tablets orpens, but also from PDAs, computer displayswith touch screens and the latest laptops. Thisis significant as it can make it possible forDSV to be implemented as a software onlysolution.

Use of such devices for electronic captureof signatures is now becoming widespreadin applications such as signing toacknowledge receipt of a parcel delivery.(Note, however, that simple signaturecapture systems do not record or comparedynamic features of signatures.)

The significant difficulties and frustra-tion which users have with passwords andPINs today, combined with the growth of e-and m-commerce, remote working, remotebanking, together with the growth of digitalconnectivity through broadband andwireless networks is creating an ever-greaterneed for innovative solutions forauthentication of an individual.

To date there have not been major trials ofDSV systems that test performance amongstdifferent sections of population, age groups,languages, etc. With many other biometricmethods such as fingerprint, facial or irisrecognition, large databases of sample imageshave been constructed enabling comparison

algorithms to be tested thoroughly offline.Therefore, an independent dynamic signaturetechnology benchmark similar to FVC1 forfingerprint is still awaited.2

Some questions remain open. Howunique are people’s signatures? What is thechance that people with the same namemight have similar signatures? Does this putpeople with common names at adisadvantage compared to those withunusual names? For example, in one majorUK enterprise alone, there are currently 285people called J. Smith.

Current DSV technologies can haveproblems with people who have either verylong or very short signatures. With shortsignatures, there is insufficient information tobe confident in the uniqueness of thesignature. However, long signatures can be toolarge for some capture devices, and algorithmscan find it difficult to locate consistentlyreplicable features in such signatures. What isthe distribution of signatures over thepopulation in terms of length and complexity?

Although DSV algorithms offer manyadvantages over a visual comparison ofsignatures, they may be less sensitive to theshape of a signature. A commercial DSValgorithm interpreted the two signaturesshown in Figure 1 as coming from the sameperson, where a human being would classifythem as being different.

In some cases it may be desirable to be ableto extract the original signatures from theuser template. This can be useful for legalreasons in situations where the ordinarystatic image of a person’s signature is needed,or to resolve disputes about verification. Theabove example shows that DSV might notalways be able to resolve such disputes in acourt of law. How do DSV algorithmscompare with handwriting experts inanalysing signatures? DSV can be usedalongside digital signatures, for which thereare already clear legal regulations in manycountries and in the European Union.

Some of the dynamic components of asignature which are commonly taken intoconsideration are the total time taken to signand the speed of strokes. These tend to differ

accordingly to what the user is signing for. Ifit is a job application, an individual may signmore slowly than if it is a phone bill.Furthermore, a person’s signature naturallyvaries according to mood, posture and thephysical characteristics of the pen. Thus,ideally, enrolment should involve capturingsignatures over a long time frame in order toallow for these variations. However, this isdifficult and costly in practice. Also, thesignature template can be updated every timea matching signature is recorded to accom-modate long-term changes to signatures.How does this affect the strength of DSV as asecurity mechanism? How much do signa-tures change over a lifetime?

This may not have such an effect in thecontext of the same application, but itmight have consequences if the sameenrolment data is being used acrossmultiple applications. Can algorithmssuccessfully distinguish between someonesigning carefully, and a forgery?

In some applications, a user could sign aphrase which is not their usual signature, thusenabling users to be authenticated withoutrevealing their signature. How consistentlyand distinctively can users write text which isnot their usual signature? How many differentsignatures can users remember?

In conclusion, there are clear technologyand application drivers for the use of DSV.Over the next few years, we expect to seefurther advances in signature capturedevices, especially the move towards paper-like flexible displays that will improve thepotential for signing electronically. Theseadvances, together with improvements inanalysis algorithms, and the falling cost ofcomputer processing will strengthen thecase for the use of DSV. Whilst there areencouraging signs about the adoption ofthe technology, further research is stillneeded.

References1. http://bias.csr.unibo.it/fvc2002.2. Marek Rejman-Greene et al, Roadmapfor Biometrics in Europe to 2010,http://www.eubiometricforum.com.

This article was contributed by LuannRragami, Maurice Gifford and NicholasEdwards at BT Exact. For furtherinformation email: [email protected]

FEATURE

Biometric Technology Today • November/December 20037

DSV – questions remain...In an age of e- and m-commerce and digital connectivity, the need to capturesignatures securely and to verify the identity of people is becoming increasinglyimportant. However questions surrounding dynamic signature verificationtechnology still remain.

Figure 1. These two signatures wereidentified as coming from the same personby a DSV algorithm.

btt novdecmasthead.qxd 22/10/2003 15:12 Page 7

Top Related