This invention concerns apparatus and a method for authenticating a subjectusing their eye as an identifying biometric, in particular the shape of theircornea. The apparatus comprises an image projection device to generate and projectan image of a pattern, made up of plural discrete points, onto at least a part ofthe cornea of an eye of the person. An image capture device to capture an image ofthe pattern of plural discrete points, after reflection in at least a part of thecornea of an eye of the person. And, a computer processor to extract a data set definingthe locations of the discrete points in the captured image. The method comprisescapturing an image of an illuminated pattern, made up of plural discrete points,after reflection in at least a part of the cornea of an eye of the subject. Comparingthe locations of the discrete points in the pattern of the captured image againstthe locations of the discrete points in the pattern of a reference image. And,authenticating the identity of the subject depending on the similarity of comparison.In a further aspect the invention is software for performing the method.