But for many small to mid-size companies, outsourcing may make sense. Since the biometric MSP manages the entire authentication process, the business customers spend more time focusing on their own core business. However, when businesses consider using a biometric MSP, they need to be comfortable having the MSP transact authentication over the Internet and allowing the MSP to control the biometric database. With all the potential of fraud in Internet transactions and breeching of databases, extra security needs to be in place in the MSP environment. All Internet transactions need to travel over SSL connections.
All data needs to be encrypted.
The hosting data center needs to be protected against penetration attempts. There cannot be any single points of failure, either in the biometric servers used for authentication or in the communication lines. That is why there need to be redundant servers with automatic fail-over. The data center needs to be also physically secure and have indefinite power backup. Finally, as businesses ramp up their volume of transactions, the MSP will need to be certified for secure transactions, secure storage and redundancy by accredited third parties.