Here's the way I run it.
I just use the standard test: scanner's Rating vs. SIN's Rating. (I might change that to the version where the SIN sets the Threshold, though.) If the scanner gets enough hits to win the exchange, this is not an automatic alarm, though -- instead, the ID gets queried deeper. If a person is involved in the scanning, the system will pop up with a prompt, where the scanner guy gets to ask the target some sort of personal question. "Where did you go to high school?" or "Mom's maiden name?" or "What was the make and model of your first car?"
If the target answers the question correctly, they pass and get to go on. Failure to answer gets the free escort to a private room, while their ID is given the fine-toothed comb treatment.
You can reflect these with Memory tests, 'cause details like these have to be fed into the system when the ID is being created. Savvy characters will get all the info loaded into some sort of database, where a quick mental search will turn it up, ready to show on an image-link display in AR. Any arrangements that'll allow this search to be done without actually looking like you're doing it helps.
Depending on the character and the situation, a Composure test might also be relevant.
Automated systems might have other means of second-step verification. Biometric data can not only store your signature, but even go so far as to have a recording of you writing it. A simple writing-pad can compare the signature itself to the base model, and also compare how quickly you draw certain portions and make sure you're doing it in the same order. So a pay kiosk at the local coffin hotel might suddenly ask for a signature. Hope you practiced it. The character might have to roll an Intuition + Agility test to successfully recreate their scrawl.
Systems running ID checks without an option of direct interaction -- say, a security cam running face-recognition software -- might opt for some non-intrusive digging, like maybe checking bank accounts for bizarre behavior, or maybe seeing if someone's shopping history looks okay. This would basically be a second scan vs. SIN rating test.
Keep in mind that any of these methods have ways to bypass. Electronic systems can be fooled with a hacker or 'mancer jumping in real quick and giving it a Jedi mind trick. If the party's mage can cast a spell without drawing attention, just have him throw something at the guard so that any answer is okay. If your face is a Way of the Voice adept, just have him use Commanding Voice: "Let us pass without ID."