Friday, 12 May 2017 08:22

Researchers say fingerprints not as foolproof as thought Featured

By

Smartphones can be fooled by fake fingerprints that are made up of several common features found in human fingerprints, researchers at New York University and Michigan State University claim.

The researchers were able to use computer simulations to create so-called "MasterPrints" that matched genuine fingerprints about two-thirds of the time.

A report in The New York Times said the researchers had not tested their findings with actual phones.

While other experts said the matching rate would be much lower in real-life condition, the findings raised troubling issues about how effective fingerprints could be as a form of smartphone security.

The NYT quoted Andy Adler, a professor of systems and computer engineering at Carleton University in Canada, as saying: "“It’s almost certainly not as worrisome as presented, but it’s almost certainly pretty darn bad.

"If all I want to do is take your phone and use your Apple Pay to buy stuff, if I can get into 1 in 10 phones, that’s not bad odds," said Adler, who studies biometric security systems.

Fingerprint.

In their paper, published in IEEE Transactions on Information Forensics and Security, the researchers said the sensors embedded in smartphones were usually small which meant that the resulting images were likewise small in size.

"To compensate for the limited size, these devices often acquire multiple partial impressions of a single finger during enrolment to ensure that at least one of them will successfully match with the image obtained from the user during authentication," the paper said.

"Further, in some cases, the user is allowed to enrol multiple fingers, and the impressions pertaining to multiple partial fingers are associated with the same identity (ie, one user). A user is said to be successfully authenticated if the partial fingerprint obtained during authentication matches any one of the stored templates."

Dr Nasir Memon, a professor of computer science and engineering at NYU’s Tandon School of Engineering and one of three authors of the study, said: "It’s as if you have 30 passwords and the attacker only has to match one."

The other two authors are Aditi Roy, a post-doctoral fellow from the Tandon School, and Arun Ross, a professor of computer science and engineering at Michigan State.

Dr Memon said the study had found that if one created a magic glove with a "MasterPrint" on each finger, then one could gain access to 40% or 50% of iPhones before the five-time limit for trying ran out.

Asked about the research, an Apple spokesman, Ryan James, said the probability of fooling the iPhone’s fingerprint system was 1 in 50,000 with one fingerprint enrolled.


Please join our community here and become a VIP.

Subscribe to ITWIRE UPDATE Newsletter here
JOIN our iTWireTV our YouTube Community here
BACK TO LATEST NEWS here

PROMOTE YOUR WEBINAR ON ITWIRE

It's all about Webinars.

Marketing budgets are now focused on Webinars combined with Lead Generation.

If you wish to promote a Webinar we recommend at least a 3 to 4 week campaign prior to your event.

The iTWire campaign will include extensive adverts on our News Site itwire.com and prominent Newsletter promotion https://itwire.com/itwire-update.html and Promotional News & Editorial. Plus a video interview of the key speaker on iTWire TV https://www.youtube.com/c/iTWireTV/videos which will be used in Promotional Posts on the iTWire Home Page.

Now we are coming out of Lockdown iTWire will be focussed to assisting with your webinatrs and campaigns and assassistance via part payments and extended terms, a Webinar Business Booster Pack and other supportive programs. We can also create your adverts and written content plus coordinate your video interview.

We look forward to discussing your campaign goals with you. Please click the button below.

MORE INFO HERE!

INTRODUCING ITWIRE TV

iTWire TV offers a unique value to the Tech Sector by providing a range of video interviews, news, views and reviews, and also provides the opportunity for vendors to promote your company and your marketing messages.

We work with you to develop the message and conduct the interview or product review in a safe and collaborative way. Unlike other Tech YouTube channels, we create a story around your message and post that on the homepage of ITWire, linking to your message.

In addition, your interview post message can be displayed in up to 7 different post displays on our the iTWire.com site to drive traffic and readers to your video content and downloads. This can be a significant Lead Generation opportunity for your business.

We also provide 3 videos in one recording/sitting if you require so that you have a series of videos to promote to your customers. Your sales team can add your emails to sales collateral and to the footer of their sales and marketing emails.

See the latest in Tech News, Views, Interviews, Reviews, Product Promos and Events. Plus funny videos from our readers and customers.

SEE WHAT'S ON ITWIRE TV NOW!

BACK TO HOME PAGE
Sam Varghese

Sam Varghese has been writing for iTWire since 2006, a year after the site came into existence. For nearly a decade thereafter, he wrote mostly about free and open source software, based on his own use of this genre of software. Since May 2016, he has been writing across many areas of technology. He has been a journalist for nearly 40 years in India (Indian Express and Deccan Herald), the UAE (Khaleej Times) and Australia (Daily Commercial News (now defunct) and The Age). His personal blog is titled Irregular Expression.

Share News tips for the iTWire Journalists? Your tip will be anonymous

VENDOR NEWS