social network

Researchers circumvented biometric identification by vascular pattern with a fake hand

They needed 2500 photographs of the hand and its wax cast.

Making cast of hands. Photo: Jan Kissler, Julian Albrecht

At the hacker conference Chaos Communication Congress in Leipzig (Germany), information security experts Jan Kissler and Julian Albrecht presented a reporton the deception of biometric authentication systems based on vascular design. Experts told Motherboard portal more about their research .

This authentication system scans the shape, size and general pattern of vessels under the skin of a person’s hand, and compares the resulting image with the available image. To deceive the test, the researchers for all time made about 2500 photographs of the hand, using a camera that had an infrared filter removed, which made it possible to better distinguish the veins under the skin. Based on the most appropriate image, they created a wax cast of a hand, which was enough to bypass the authentication system.

Slides from the report of researchers showing hand made. Photo: Jan Kissler, Julian Albrecht

The experts revealed the details of their research to Fujitsu and Hitachi specialists who are developing similar biometric systems, however, as the Motherboard writes, have not yet received any response from the companies. All the work took about a month from Chrissler and Albrecht, and experts fear that “a well-funded and resourced adversary, such as the state, may repeat this study on a broader and more efficient scale.”

[perfectpullquote align=”full” bordertop=”false” cite=”” link=”” color=”” class=”” size=””]Biometrics is always an arms race. Manufacturers improve their systems, then hackers come and break them, and then it all starts again.[/perfectpullquote]
Ian chissler
Security expert
Back to top button