Fingerprint spoofing – a known & achievable process
Fingerprint recognition is more often being used in mobile and desktop solutions to provide convenient and secure identity authentication. But, today’s fingerprint sensors are vulnerable to spoofing via fake fingers. The risk for fraud and spoofing via fake fingerprints poses a threat to sensitive applications like mobile payments.
A determined and thoughtful person can effectively steal another individual’s fingerprint identity via so called uncooperative spoofing. Fingerprints are left on numerous surfaces and it is possible to readily acquire a latent fingerprint in under 60 seconds using a variety of known methods (e.g., lift tape, cyanoacrylate fuming, photography). Once latent prints are captured and digitized, fingerprint molds and fake fingerprints are readily produced using household materials such as gelatin, latex paint and modeling clay.
Uncooperative attack process
Lift latent print via tape, photo, or fuming
Digitize image and create mold via acetate, PCB etching, or 3D printed mold
Execute spoof attack
Solutions for enhanced security Precise Biometrics’ solutions and services for mitigating spoof-related risks, such as fake fingers, are designed to protect fingerprint sensors and lower the risk for fraud. Our spoof and liveness detection software further increases security of fingerprint authentication and our additional products and services improves the spoof detection capabilities of fingerprint technology. The following products and services are available:
Software for spoof and liveness detection Our Spoof and liveness detection software, Precise BioLive™, identifies a fake fingerprint by analyzing several fundamental image differences between a live fingerprint image, and one from a spoof. The benefits of having a software-based solution are:
Sensor technology agnostic – can be integrated with any fingerprint sensor on the market, whether it is in desktop or mobile environment
Easy integration – no additional hardware is needed, which makes it cost effective
Upgradeable – keeps pace with emerging spoof threats
Our software solution is based on machine learning (AI), which makes it adaptable to any form of spoofing. The security level can be tailored to work with a specific hardware configuration.
Vulnerability analysis of fingerprint sensors
Precise Biometrics offer Vulnerability analysis of fingerprint sensors, assessment of a given fingerprint sensor’s vulnerability to spoofing via spoof attacks, analysis and a subsequent comprehensive report.
Database Collection Services
Precise Biometrics also offer Database Collection Services, collection of live & spoof fingerprint images to create databases and to train algorithms to improve fingerprint matching or spoof and liveness detection.
Fingerprint Spoof Lab
Our Fingerprint Spoof Labis a time-saving turnkey kit for building spoof resistance in fingerprint sensors. The kit contains guidelines and information about spoof creation, spoof specimens and lab supplies, as well as a user guide, for testing and evaluating sensor vulnerability.