Fake Fingerprints - Liveness Detection Solutions

By: Brian Rhodes, Published on Oct 19, 2015

One of the biggest concerns with fingerprint readers is how easy they can be fooled. While biometrics are typically more difficult to steal or fake, headlines still break news of fake fingers or stolen prints being used to fool sensors.

For this reason, many access control fingerprint readers include live finger or liveness detection that checks the finger being scanned is authentic.

In this note, we examine the four common methods (tissue reflection, heartbeat detection, dermal electric resistance, unnaturalness analysis), what HID, Morpho and Suprema use and why you need to beware of ambiguous claims.

*** ** *** ******* concerns **** *********** ******* is *** **** **** can ** ******. ***** biometrics *** ********* **** difficult ** ***** ** fake, ********* ***** ***** news ** **** ******* or ****** ****** ***** used ** **** *******.

*** **** ******, **** access ******* *********** ******* include **** ****** ** liveness ********* **** ****** the ****** ***** ******* is *********.

** **** ****, ** examine *** **** ****** ******* (tissue **********, ********* *********, dermal ******** **********, ************* analysis), **** ***, ****** *** Suprema *** *** *** you **** ** ****** of ********* ******.

[***************]

Stealing ************ ** ***** **********

*** **** ***** ** the ******* ** **** while ************ *** ******, they *** ** ****** or **** ******* **********. Throughout *** *****, ******* methods ** ******** ******, by ***************** ******** ** ****** tips, ********** **** ***** *********,*****-**** ******* ** ****** prints, ** **** ***** cadaver ******* **** **** reported.

***** *** ****** ** producing ******* ****'* ***** takes **** ****** **** stealing * ****, ***, or ***, *** **** is *** **** - unauthorized ****** **** **** access ** ********* ***** they ** *** ******.

Four Common *******

***** *********** ****** ************* frequently *** ******** ********* methods, **** ** *** always ******* **** **** are ** *** **** work. ** *******, *** number *** **** ** methods * ************ ******* vary *** ********* **** into **** ********* **********:

****** **********:*** **** ****** ****** (sometimes ****** ************* *******) typically **** ** ***** to ******* *** ********* contrast ** * ******'* skin. **** ****** ****** on *** **** **** normal, ****** **** ******** IR ***** ** * consistent *** **** ***** different ** **** ** covered ** ********* ********. Especially *** ******* ***** sensors, **** ***** ** done ** *** **** time ** *** *********** is '****', ** ***** is ** ***** ****** the ****.
********* *********: *** ** *** strongest ******* **** * high ******* ******** **** to ****** *** *********, rhythmic ******** ** *********** coursing **** *****. **** impulse *********** ** * beating *****, *** ******* it ******* *** ******** attempt ** *******. ***** both ******* ** ******** and ******** ***** **** particular ****** *** ** the **** ********* ******* for ************* ** ***.
****** ******** **********:*** ********** **** ** sensors, ******* ***** **** carries * ***** *** consistent ********** **********. ** a ****** ** ********* and *** ****** ** unable ** ******* ******* skin **********, ** ** invalidated. **** ** *** cost ********** ***** ******, this ******** ***** ** common, *** ** *** not ** ******** ** wet ** **** ************ that ****** *** ******* of **** *** ***** in ******.
************* ********: **** ****** ***** ** the *******, ** ** relies ** ******** ****** alone ** ********* ************. This ****** ******** * print ******* ******* *************** of ***** ** ******* *******. ***** ** ****** checks **** *******, ****** or ***** *****, ***** print *****, ** ******** clarity ** *** *****, if *** ******* ** the **** ***** ******* a ******* '*********' *****, the ***** ** *********** as ****.

***** *** **** ****** of ******* ** *** market, * **** ******* Liveness ********* ******* $***, ***** * **** **** layers ******* ******* *** cost *** ****. *** addition ** ******** ********* is **** *** ****** of ***** ***** **** drive ***** ******, ***** with ****** ****, *********** support, *** ************* *********** of *** ******.

Liveness ******* ****

** ****** *** **** of **** ** ******* prints, **** ********** *********** scanners *** ******* *** checks ** ******* **** are real. ***** ** * list ** '******** *********' or '**** ****** *********' on ****** *********** ******* specsheets:

********/*** ******: **** ********* ********* and ****** ********** ** validate ******* *** ****.
******: ********* ** *** reader, ****** **** ****** reflection, ****** **********, ******* up **** ************* ********.
*******: **** * ****** of ************* ********** ** determine ** ****** *** faked ** *********** ** they *** ******.

** *******, ***** ********* implement **** **** * single ****** ** **** on *******- * *** point ** ******** *** wide ***** ** ********* fake/spoofed ***** ********.

Beware ******** ******

*** *** '******** *********' methods *** ******* *********. For ******* *****'* ***** ** *** ****** *********** ****** (**** release) ** * ****** fingeprint *****. ***** ******* the ****** **** '******** detection ******** *** **********' (unnaturalness ********) ** ********** models. *******, ******* ***** ****** ****** effective *****, **** ***** ***** updates. ** *** **** of *****'* *********** ******, spoofed ** ***** ****** are ***** * **** with ******** ******* *****.

** *******, ********* ******* that *** ******** *** software **** *** ****** performing (**: *********, ****** Resistance, *** ****** **********). Take **** ** ***** methods ************* **** **** use, *** ** ********-**** (like ************* ********) ** unclear, ** ****.

Comments (6)

Horace Lasell

10/21/15 12:05am

Thanks, Brian, for a really informative article.

It would be interesting to hear about hyperspectral's robustness to skin color variations. It seems reasonable that natural variation has been considered and accommodated, without substantially reducing ability to discriminate false presentations. In fact, it would be interesting (and probably more secure) if hyperspectral skin tones added another dimension to the fingerprint signature.

There must be a reasonably wide variation in acceptable conductivity to accommodate routinely varying conditions. Knowing that skin conductivity is relevant, how hard could it be to replicate a static resistance within a dummy finger, or even on a dummy image? Naively, considering that many laserjet inks are conductive, could you print a target resistance by varying print darkness? Who knows what is possible?

For heartbeat, one could print onto a flexible substrate (something like acetate), then glue it onto a bladder such as a balloon. While presenting that image to the reader, one could gently squeeze the bladder slightly more frequently than once per second.

If hyperspectral IR has a reasonable resolution, it seems as if it could be the most difficult to faithfully replicate, and that fingerprint augmentation with hyperspectral signature could even enhance security.

Undisclosed #1

In reply to Horace Lasell | 10/21/15 12:58am

IMHO, one could obtain, at the expense of authorization delay, a higher level of confidence by using a challenge and response mechanism.

Something where the reader would display randomly changing "challenge", like a gesture, that would one mimic in response.

Of course, this is easier said than done, but could be useful since all static biometrics are, if someone is willing to spend enough $, vulnerable to the attack vector of 'fool the sensor'.

Konstantin Avramenko

10/21/15 01:29am

IMHO, it is too expensive (and usually affects accuracy) and can be solved by employing other methods. For instance, a couple of possible options:

enroll all fingers and request a different one each time or a combination
in the same price range it is more efficient (accurate, robust) to use palm vein or iris verification
the easiest (and probably the best) way is to use multi-factor authentication (PIN / Card / Fingerprint / Voice / Face)

Baudouin Genouville

01/18/16 02:56am

[Request for Update (Suprema)]

Hi John / Brian,

Check this out: https://www.supremainc.com/en/AccessControl-TimeandAttendance/Biometric/BioStation-A2

Not all fingeprint devices from Suprema are using that advanced feature thought:

BioStation A2 is implementing advanced Live Finger Detection based on:

- Dynamic Pattern Analysis

- Unnaturalness Analysis

- Dual Source Light Imaging

BioStation A2 was tested and compared to nop notch fingerprint vendors as below:

#pushingthelimits

Best regards,

baud

Keith Beatty

IPVMU Certified | 04/20/17 01:10am

Who would dig up grandma just to look at a bunch of military floppy discs?

Some people just need a hobby...

Justin Dingo

IPVMU Certified | 04/21/17 12:26pm

once again it seems like it comes down to adding layers to decrease risk. all about the how much the customer is willing to spend to protect their assets.

Login to read this IPVM report.

Why do I need to log in?

IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Most Recent Industry Reports

US DoD Comments on Huawei, Hikvision, Dahua Cyber Security Concerns on Oct 16, 2019

A senior DoD official said the US is "concerned" with the cybersecurity of Hikvision, Dahua, and Huawei due to "CCP" (China Communist Party)...

Pelco Sarix Pro3 Camera Tested on Oct 16, 2019

Pelco has released their Sarix Professional Series 3 cameras, claiming "more security detail in challenging scenes with excellent low light and...

IPVM Camera Calculator User Manual / Guide on Oct 16, 2019

Learn how to use the IPVM Camera Calculator. The guide below includes instructions, images, gifs, and videos demonstrating and explaining the...

Altronix Claims Tango 'Eliminates Electricians' on Oct 15, 2019

Power supply provider Altronix claims its new Tango power supply 'eliminates the need for an electrician, dedicated conduit and wire runs'. In...

Pelco CEO Out, Seeking New Industry CEO, New CEO Found on Oct 15, 2019

Just 2 months after Pelco was sold, Pelco's CEO is out, with Pelco bringing in an outside President and searching for a new CEO from the industry,...

Hikvision Dissolves North American Business Unit, Splits Canada and USA on Oct 15, 2019

Hikvision has dissolved its North American Business Unit, splitting up US and Canada operations as the PRC-government owned manufacturer faces...

Camera Focusing Tutorial on Oct 14, 2019

Camera focus is fundamental to quality imaging. Mistakes can significantly reduce details, making cameras less effective. In this guide, we...

"UL Has Blood On Their Hands" Alleges The Interceptor / Keith Jentoft on Oct 14, 2019

"UL has blood on their hands" alleges Keith Jentoft of "The Interceptor Project". We examined The Interceptor in-depth last year, see: The...

Access Control Course Fall 2019 - Last Chance on Oct 14, 2019

Register Now - Fall 2019 Access Control Course. Thursday, October 17th is the last day to register. IPVM offers the most comprehensive access...

Axis HD Analog Encoder Tested on Oct 11, 2019

Two years after declaring "Everything is IP", Axis has released their first HD analog encoder, the P7304, with support for AHD, CVI, TVI, and SD...