|
From an article on Biological.ws..... "The data seems to contradict the claims of companies that sell biometric authentication systems. They have said biometrics are among the hardest-to-crack security methods since they rely on the unique physical characteristics of their users. Matsumoto, however, was able to gain
unauthorized access with two relatively simple techniques, according to Schneier's report on the tests. Matsumoto performed his experiments on 11 different biometric
fingerprint scanners using a fake finger molded out of gelatin. Matsumoto made a plastic mold of a real finger, and then created the false finger by injecting gelatin into the mold. The gelatin finger was able to gain unauthorized access through the 11 fingerprint scanners about 80 percent of the time, according to Schneier. Matsumoto then attempted a more complicated experiment in which he drew
latent fingerprints from a piece of glass and attempted to add those prints to the gelatin finger, Schneier wrote. After lifting the fingerprint from the glass, he enhanced it, photographed it and tweaked it in Adobe Systems' Photoshop, he said. Matsumoto then printed the fingerprint onto a transparency sheet and had it etched into a
photosensitive circuit board. The print on the circuit board was then applied to the gelatin finger. This technique also allowed access about 80 percent of the time, Schneier wrote. "If he could do this, then any semi-professional can almost certainly do much, much more," Schneier wrote. "All the fingerprint companies have claimed for years that this kind of thing is impossible. When they read Matsumoto's results, they're going to claim that they don't really work, or that they don't apply to them,
or that they've fixed the problem," Schneier wrote. "Think twice before believing them."
Full Report is right here: http://www.itu.int/itudoc/itu-t/workshop/security/present/s5p4.pdf
|