AWS brings Amazon One scanning palm authentication to the enterprise

Amazon’s cloud computing subsidiary AWS (Amazon Web Services) has lifted the lid of a new palm-scanning identification service that allows companies to authenticate people when entering physical premises.

Amazon An Enterprise, as the service is called, builds on the company’s existing Amazon One offering that it debuted back in 2020 to enable biometric self-surveillance payments operated by Amazon’s cashierless stores. Visitors to Amazon Go stores can associate their payment card with their palm-print, allowing them to enter the store and complete their transaction by waving their hand over a scanner.

While the technology has raised concerns about how Amazon handles and processes user biometric data, in recent years the company has doubled down on the technology, offering cash incentives to entice customers to register their palm-prints, service expansion to all Throughout it. Stores foods in the US, and creates partnerships with third-party sellers.

Amazon One Enterprise seems like a natural extension for this technology, given Amazon’s role in the enterprise software stack and dominate the cloud infrastructure market. Despite the remote work revolution, companies still want their office workers, at least some of the time. And with Amazon One Enterprise, they can deploy contactless authentication devices wherever people flow, whether that’s office foyers, universities, airports, and everywhere in between.

In addition, Amazon said the technology could also be used to control access to some restricted software, perhaps where financial or HR data resides. This effectively positions Amazon One Enterprise as a potential replacement for many forms of identification, such as badges and fobs commonly used to access buildings, and passwords and PINs used to access to the software.

Companies that want to install Amazon One Enterprise have a choice of two scanning devices – a standalone device that they can embed wherever they need it such as a door or barrier, and a which comes on a pedestal that can be placed anywhere. From there, workers must enroll in Amazon One Enterprise with their physical badge before associating their palm-print with their profile. Or, if the normal method of authentication is a password or PIN which is more likely to occur in software, they can also associate their palm-print with such credentials during the enrollment phase.

Amazon An Enterprise

Amazon An Enterprise Image Credits: Amazon


While Amazon’s new business palm scanning service is clearly based on the same technology and infrastructure as its consumer offering, the company is keen to emphasize that it’s different from the system people use to prove themselves in retail stores. Enterprise level data privacy, and all that.

“You can’t use your palm to pay at a Whole Foods Market or other Amazon One-enabled locations even if you’re signed up as a business,” the company said in a FAQ. “This is because, with Amazon One Enterprise, we offer a private collection of palm signatures for each business resulting in strong data isolation and security.”

The company says it stores AWS Cloud users’ palm-prints and badge IDs, although they can remove their biometric data through an Amazon One enrollment device similar to the one they first used to log in. – sign up. Amazon also said it will automatically delete users’ data if they don’t interact with an Amazon One Enterprise device for two years.

Amazon One Enterprise is in preview for US customers now.

Leave a comment