As we know, there are 3 types of authentication Something you know (dob, password) Something you have (bank card, key) Something you are (biometric measurement

As we know, there are 3 types of authentication Something you know (dob, password) Something you have (bank card, key) Something you are (biometric measurement ie fingerprint) Surely a biometric measurement on it's own is secure enough? Its also the simplest. Something I've noticed from working in banking security is that asking fixed answer questions (something that doesn't change) quickly detects possible unauthorised access attempts. e.g it's deeply suspicious if someone forgets their dob. Asking questions that have flexible answers results in lots of incorrect answers by genuine account holders & resets are required frequently. Questions like favourite place, first school, age (yes, believe it or not blackberry uses a fixed age not dob!) should not be used.