A biometric access control system for controlling access to an environment based on an authorization status of a living subject is disclosed. In one example, a data source generates image data of a tissue region of the subject. A liveness measurement unit processes the image data to detect changes over at least one of time or spatial volume in one or more structural features of the tissue region and generates, based on the detected changes, a spoofing attack detection status indicating that the image data is from living biological tissue or that a spoofing attack is detected. A biometric identification unit processes at least a portion of the same image data generated by the data source to generate biometric information indicative of an identity of the subject. Responsive to the spoofing attack detection status and the biometric information, an authorization unit outputs an authorization status for the subject.