Japanese researcher gums up biometrics scanners

A Japanese researcher has demonstrated that some biometric fingerprint readers can often be fooled into granting access to unauthorized users with a few dollars of household supplies and a little ingenuity.

The discovery was disclosed on May 14 in a presentation given by Tsutomu Matsumoto -- who is affiliated with the Graduate School on Environment and Information Sciences at Yokohama National University in Japan -- at the ITU-T Workshop on Security being held in Seoul, South Korea. Matsumoto posted his presentation online but news of the discovery was spread most widely through the new issue of security guru Bruce Schneier's Crypto-Gram e-mail newsletter, which was released Wednesday.

"The results are enough to scrap the systems completely, and to send the various fingerprint biometric companies packing. Impressive is an understatement," Schneier wrote.

The data seems to contradict the claims of companies that sell biometric authentication systems. They have said biometrics are among the hardest-to-crack security methods since they rely on the unique physical characteristics of their users. Matsumoto, however, was able to gain unauthorized access with two relatively simple techniques, according to Schneier's report on the tests.

Matsumoto performed his experiments on 11 different biometric fingerprint scanners using a fake finger molded out of gelatin. Matsumoto made a plastic mold of a real finger, and then created the false finger by injecting gelatin into the mold. The gelatin finger was able to gain unauthorized access through the 11 fingerprint scanners about 80 percent of the time, according to Schneier.

Matsumoto then attempted a more complicated experiment in which he drew latent fingerprints from a piece of glass and attempted to add those prints to the gelatin finger, Schneier wrote. After lifting the fingerprint from the glass, he enhanced it, photographed it and tweaked it in Adobe Systems Inc.'s Photoshop, he said. Matsumoto then printed the fingerprint onto a transparency sheet and had it etched into a photosensitive circuit board. The print on the circuit board was then applied to the gelatin finger. This technique also allowed access about 80 percent of the time, Schneier wrote.

"If he could do this, then any semi-professional can almost certainly do much, much more," Schneier wrote.

"All the fingerprint companies have claimed for years that this kind of thing is impossible. When they read Matsumoto's results, they're going to claim that they don't really work, or that they don't apply to them, or that they've fixed the problem," Schneier wrote. "Think twice before believing them."

Matsumoto's presentation is available online at http://www.itu.int/itudoc/itu-t/workshop/security/present/s5p4.pdf

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Sam Costello

Computerworld
Show Comments

Cool Tech

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Breitling Superocean Heritage Chronographe 44

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?