Clarkson University
A finger mold used in researchers' efforts at Clarkson University to fool biometric devices.
Posted on 12/23/2005 9:51:34 PM PST by neverdem
Identity thieves are always looking for new ways to pry out personal information, from trolling through trash cans to phishing for bank accounts online. But here is one method they may not have tried: using fake fingers made from Play-Doh and gelatin, or taking digits from a cadaver's hand.
In a study, researchers at Clarkson University in Potsdam, N.Y., tested 66 fake fingers to see if they could outwit biometric devices, which identify individuals based on the physiological properties of their fingerprints or other body parts. The fake fingers went undetected more than half the time.
"Even if it comes from Play-Doh, the scanner has no way of knowing that. It is just taking a picture of an image," said Stephanie C. Schuckers, a Clarkson electrical and computer engineering professor who helped lead the research. "People in the industry are aware this is an issue."
The results, published this year in the IEEE: Transactions on Systems, Man, and Cybernetics journal, highlight a potentially huge vulnerability. Many hospitals and federal agencies use it for tracking people and restricting access. More than a million I.B.M. laptops have print-based safeguards built-in. Even some supermarkets allow their customers to swipe a finger instead of a credit card.
Biometric devices generally work by converting a fingerprint image into a series of numbers, just as a checkout-counter scanner reads a bar code. They do not capture so-called "liveness" characteristics, like the blood oxygen content or sweat.
To be sure, some biometric devices rely on an additional form of identification, like a PIN, to guard against fraud. But Dr. Schuckers hopes to introduce new technology that can detect pore perspiration patterns to prevent the biometric devices from being fooled. She has started a company, NexID Biometrics, to start licensing it next year.
Dr. Schuckers conceded it would...
(Excerpt) Read more at nytimes.com ...
The Times is worried about this as they commit treason against their fellow citizens? Jokers!
Of course, he used Fairy technology too (thanks Foaly, despite the tin-foil hat!).
So your mileage may vary.
Cheers!
Cheers!
Some scanners can detect a pulse. This is essential.
That's easy to fix, simply make a "skin" of the original fingerprint out of electrically conductive rubber (the kind used in liquid-crystal display contacts, perhaps), wear this skin, and you're in!
"Is that your finger in the detector or are you REALLY glad to see me?"
Cheers!
A woman from Hong Kong actually said that to me once.
She didn't take credit cards.
I'm lonely.
Exactly right... The applicability is more for retinal scans. Fingerprints are really quite poor biometrics, IMHO. Security has to be managed, though, and not everywhere can use a retinal scanner or other technology...the question is, how easy is it to make the thin finger coverings without obscuring the pulse? It won't stop a determined attacker, but might it provide some deterrence for lower-security applications? Without pulse detection, they are very easy to fool.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.