Bugtraq mailing list archives
RE: Hacking USB Thumbdrives, Thumprint authentication
From: "Lyal Collins" <lyalc () ozemail com au>
Date: Thu, 12 Feb 2004 19:44:31 +1100
[> Most fingerprint systems convert the fingerprint image into [> what's called [> a template. This is a numeric representation, but [> comparision between [> two templates is not as simple as "==". Different portions of the [> template represent different minutae on the fingerprint, and [> an actual [> feature matching algorithm still needs to be used. Thus, we [> cannot hash [> these templates because there is no way to perform matching on the [> template hashes. There has been some interesting work done with facial biometrics that leverages the predictability of facial features (most eyes look similar, noses have a similar basic shape etc) to allow the generation of a 'false' facial image that will match to the template of a chosen target template. This iterates the placement and subtle variations in the faked facial image until this fake image results in an acceptable match through the same template generation process. The image doesn't need to be exactly the same (and the example images I saw were barely "human" to the naked eye) - merely that theey result in a similar template as the true image. I suspect the same process of iteratively varying whorls, ridges etc could, and would, result in a fales fingerprint that results in an acceptable template match to the real finger. Has anyone researched this with fingerprints? Lyal
Current thread:
- RE: Hacking USB Thumbdrives, Thumprint authentication markus-1977 (Feb 05)
- RE: Hacking USB Thumbdrives, Thumprint authentication Navaneetharangan (Feb 06)
- Re: Hacking USB Thumbdrives, Thumprint authentication Eric 'MightyE' Stevens (Feb 11)
- Biometric systems security [WAS: Re: Hacking USB Thumbdrives, Thumprint authentication] Gadi Evron (Feb 07)
- Re: Hacking USB Thumbdrives, Thumprint authentication Dave Aronson (Feb 09)
- Re: Hacking USB Thumbdrives, Thumprint authentication Eric Murray (Feb 11)
- <Possible follow-ups>
- RE: Hacking USB Thumbdrives, Thumprint authentication David Brodbeck (Feb 09)
- RE: Hacking USB Thumbdrives, Thumprint authentication Charles Clancy (Feb 11)
- RE: Hacking USB Thumbdrives, Thumprint authentication Lyal Collins (Feb 16)
- RE: Hacking USB Thumbdrives, Thumprint authentication Charles Clancy (Feb 11)
- RE: Hacking USB Thumbdrives, Thumprint authentication David.Cross (Feb 11)
- RE: Hacking USB Thumbdrives, Thumprint authentication Navaneetharangan (Feb 06)