artificial fingers for fingerprint scanners - matsumoto laboratory
TRANSCRIPT
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
1/33
I TU-T Workshop on Secur ity, Seoul
Importance of Open Discussion on
Adversar ial Analyses for Mobile Secur ity
Technologies--- A Case Study for User I dentif ication ---
14 May 2002
Tsutomu MatsumotoGraduate School of Environment and Information Sciences
Yokohama National University
email: [email protected]
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
2/33
Mobile Security Technologies
Security Architecture
Operating Systems Security
Software Tamper ResistanceMobile Code Security
Physical Tamper ResistanceCommunications Security
Cryptographic Protocol
User Identification
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
3/33
Adversar ial Analysis
Secur ity assessmentof biometr ic user identi f icationsystems should be conducted not only for the accuracy
of authentication, but also for securi ty against fraud.
I n this presentation we focus on F ingerpr int
Systems which may become widespread forMobile Terminals.
Can we make arti f icial f ingers that fool f ingerprint systems?
Examine Adversar ial Analysis as A Third Party
What are acceptance rates?
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
4/33
F ingerprint Systems
Typical structure of a fingerprint systemTypical structure of a fingerprint system
Types of sensorsTypes of sensors
Optical sensors
Capacitive sensorsThermal sensors, Ultrasound sensors, etc.
Finger
Finger Data
Feature Extraction
Finger Information Database
Fingerprint System
Enrollment
Verification or Identification
Recording
Capturing
Presenting
Result
Referring
Comparison
L ive and Well Detection
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
5/33
A Risk Analysis for F ingerprint Systems
Attackers may present
1) the registered finger,by an armed cr iminal, under duress, or with a sleeping
drug,
2) an unregistered finger (an imposter ' s f inger),i .e., non-effort forgery,
3) a severed fingertip from the registered finger,
4) a genetic clone of the registered finger,
5) an arti f icial clone of the registered finger, and
6) the others,
such as a well-known method as a fault based attack.
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
6/33
Fraud with Artif icial F ingers
Part of patterns of dishonest acts with artificial fingersagainst a fingerprint system.
L(X): A Live Finger corresponding to Person XA(Y): An Artificial Finger corresponding to Person Y
A(Z): An Artificial Finger corresponding to Nobody
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
7/33
Fraud with Ar tif icial F ingers I
X
L(X)
X
L(X)
EnrollmentEnrollment
A(X)s
Distribution of A(X)sDistribution of A(X)s
Y X
Y obtains A(X).Y obtains A(X).
A(X)
X or Y
AuthenticationAuthentication
A(X)
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
8/33
Fraud with Ar tif icial F ingers II
Y X
X obtains A(Y).X obtains A(Y).
A(Y)
X
A(Y)
X
A(Y)
X enrolls A(Y).X enrolls A(Y).
AuthenticationAuthentication
A(Y)or L(Y)
X orY
A(Y)s
Distribution of A(Y)sDistribution of A(Y)s
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
9/33
Fraud with Ar tif icial F ingers III
X Y
Y makes A(X).Y makes A(X).
A(X)
L(X)X
L(X)L(X)
EnrollmentEnrollment
X
A(X)s
Distribution of A(X)sDistribution of A(X)s
Y
AuthenticationAuthentication
A(X)
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
10/33
Mapping a F ingerpr int onto Ar tif icial F ingers
Finegerprint
Impression
Artificial Finger
e.g., Molds, Residual Fingerprints, ...
e.g., Live Fingers, Generators, ...
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
11/33
Known Results
Process 0
(1) F inger
(2) Mold
(3) Sil icone Rubber F inger
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
12/33
Fact
Often AcceptsSilicone Rubber Fingers
Finger
LightSource
Det
ector
Finger
Array of Electrodes
Usually RejectsSilicone Rubber Fingers
Optical SensorOptical Sensor Capacitive SensorCapacitive Sensor
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
13/33
Gummy F ingers
Our ResultProcess 1(1) F inger
(2) Plastic Mold
(3) Gummy F inger
Our ResultProcess 1(1) F inger
(2) Plastic Mold
(3) Gummy F inger
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
14/33
Recipe 1-1
Making an Artificial Finger directly from a Live Finger
Solid gelatin sheetGELATINE LEAF
by MARUHA CORP
200JPY/30grams
Free molding plasticFREEPLASTIC
by Daicel FineChem Ltd.
350JPY/35grams
MaterialsMaterials
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
15/33
Recipe 1-2
Put the plasticinto hot water
to soften it. Press a live fingeragainst it.
The moldIt takes around 10 minutes.
How to make a moldHow to make a mold
Making an Artificial Finger directly from a Live Finger
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
16/33
Recipe 1-3
Making an Artificial Finger directly from a Live Finger
Preparation of material
A liquid in which immersed gelatin at 50 wt.% .
Preparation of material
Add boiling water (30cc) to solid gelatin (30g) in abottle and mix up them.
It takes around 20 minutes.
R i 1 4
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
17/33
Recipe 1-4
Making an Artificial Finger directly from a Live Finger
How to make a gummy fingerHow to make a gummy finger
It takes around 10 minutes.
Put it intoa refrigerator to cool.
Pour the liquid
into the mold.
The gummy finger
Si il i t i th L i F i
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
18/33
Similar i ty with L ive F ingers
The photomicrographs of fingersThe photomicrographs of fingers
(a) Live Finger (b) Silicone Finger (c) Gummy Finger
C t d I
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
19/33
Captured Images
Captured images with the device C (an optical sensor).Captured images with the device C (an optical sensor).
(a) Live Finger (b) Silicone Finger (c) Gummy Finger
Captured images with the device H (a capacitive sensor).Captured images with the device H (a capacitive sensor).
(a) Live Finger (b) Gummy Finger
E periments
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
20/33
Experiments
F ingerprint systems: 11 types
Subjects: five persons whose ages are from 20s to 40s
We attempted one-to-one verification 100 times counting thenumber of times that it accepts a finger presented.
Types of experiments
Experiment Enrollment Verification
Type 1 Live Finger Live Finger
Type 2 Live Finger Gummy FingerType 3 Gummy Finger Live Finger
Type 4 Gummy Finger Gummy Finger
The L ist of F ingerpr int Devices
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
21/33
The L ist of F ingerpr int Devices
H ardw are S pecifications So ftwa re Spe cific ationsM e thods
M anufacturer /
Selling Agency P ro duc t N am e T yp e
Pr oduc t
N u m b e r Sensor
Live and
We l lDetect ion
M anufacturer /
S e l ling Agency
Product Name
(Application)
Compar i s on
Levels
fo rVerification
D evice ACo m p aq Co m p u ter Corporat ion
Co m p aq S t an d -Alo n eFingerprint IdentificationUni t
D F R-200 E 0 38 11U S 00 1Opt icalSen so r
u n k n o wnCo m p aq Co m p u ter Corporat ion
F in gerprint IdentificationT echnology Sof tw areversion 1.1
1 through 3Minut iaeMatch in g
D evice BM I T S U B I S H IE L E C T R I CC O R P O R A T I O N
Fingerprint R ec ognizer F PR -D T mkII 003 136Opt icalSen so r
u n k n o wnSu m ik in I zu m iCom puter Serv ice co .Ltd .
S ecFP V 1.11 F ix edMinut iaeMatch in g
D evice C N E C C orp or a ti on Fingerprint IdentificationUnit (Prism)
N 7 95 0- 41 9 Y00 00 3 Opt icalSen so r
unk now n N E C C orp ora tion Basic Util i t ies forF in gerprint Identification
Fixed
Minut iae
Match in g(Minut ia andRelat ion)
D evice D OMRON Co rp o ra t i o nFingerprint RecognitionSensor
FP S-100 0 9 050 085 4Opt icalSen so r
unk now n O M R O N C or por ation"Y U B I PA S S" U.are.U F in gerprint Ver ificationSo f tware
FixedMinut iaeMatch in g
D evice E Sony Corporat ionSony F ingerpr in tIdentification U nit
F IU -00 2-F11 0 07 09Opt icalSen so r
Live Fingerdetection
T S U B A SA S Y S T E MC O . , L T D .
F in gerprint IdentificationU n it W in do ws9 5In teract ive Demo Ver sion1 .0 Bu i ld 13
1 through 5Pat ternmatch ing
D evice F FU J IT SU L IM IT E D Fingsensor FS-2 00U 00 A A 0 002 57Capaci t ive
Sen so r unknow n F U JIT S U L IM IT ED
Logon for Fingsensor V1.0for W indows95/98
FixedMinut iaeMatch in g(Correlat ion)
D evice G N E C C orp or a ti onFingerprint IdentificationUnit (Seria l)
P K-FP 002 03 005 29SCapaci t ive
Sen so r unk now n N E C C orp ora tion
Basic Util i t ies forF in gerprint Identification
Fixed
Minut iaeMatch in g(Minut ia andRelat ion)
D evice HSiemens A G (Infineon
Technologies AG )
FingerTIP
E V A L U A T I O N K I T
E V A L U A T I O N -
K IT
C 9 8 4 5 1 -D6 1 0 0 -A9 0 0 -
4
Capaci t ive
Sen so r u n k n o wn
Siemens AG (Infineon
T echnologies AG)
FingerTIP So f twareD ev elo pm en t Ki t (SDK )
V ersion : V0.90 , B eta 3"Dem o P ro g ram "
FixedMin u t i a
match ing
D evice I Sony Corporat ionSony F ingerpr in tIdentification Unit
F IU -710 30 00 398Capaci t ive
Sen so r Live Finger
detectionSystemneeds Inc. Go o d -b y e " PASSWORD" s 1 th rough 5
Pat ternmatch ing
D evice J Secu gen Ey eD m ouse II S M B - 8 0 0 9 6 5 0 1 7 2 0 0 4 O p t i c a lSen so r
u n k n o wn S e c u g e nSecu Desk top 1 . 55 {
1 th ro u g h 9Minut iam atch in g
D evice K Ethenticaethent icat io r MS 3 000 PCCard
M S 3 0 0 0 M 3 0 0 F 2 0 0 9 9 1O p t i c a lSen so r
u n k n o wn EthenticaS ec u r e S u i teRele as e1. 0
F i x e dMinut iam atch in g
Experimental Results
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
22/33
Experimental Results
Making an Artificial Finger directly from a Live Finger
0
20
40
60
80
100
A B C D E F G H I J K Fingerprint Device
TheN
umberof
Ac
ceptance(ti
mes/100ate
mpts)
L - L L - A A - L A - A
Gummy F ingers
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
23/33
Gummy F ingers
Our ResultProcess 2(1) Residual F ingerpr int(2) Digital Image Data
(3) Pr inted Circuit Boar
(4) Gummy F inger
Our ResultProcess 2(1) Residual F ingerpr int(2) Digital Image Data
(3) Pr inted Circuit Board
(4) Gummy F inger
Recipe 2 1
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
24/33
Recipe 2-1
Making an Artificial Finger from a Residual Fingerprint
MaterialsMaterials
A photosensitivecoated Printed CircuitBoard (PCB)10K by Sanhayato Co., Ltd .
Solid gelatin sheet
GELATINE LEAF by MARUHA CORP
200JPY/30grams
320JPY/sheet
Recipe 2-2
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
25/33
Recipe 2-2
Digital M icroscope
KEYENCE VH6300: 900k pixels
I nkjet Printer
Canon BJ-F800: 1200x600dpi
Residual Fingerprint
Enhancing
Capturing
Fingerprint Image
Image Processing
Transparent Film
Mask
PhotosensitiveCoated PCB
CyanoacrylateAdhesive
Adobe Photoshop 6.0
Printing
Exposing
Developing
Etching
Mold
UV l ight
Recipe 2-3
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
26/33
Recipe 2 3
A Mask with Fingerprint Images
An Enhanced Fingerprint A Fingerprint Image
Recipe 2-4
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
27/33
Recipe 2 4
Gelatin Liquid
Put this mold intoa refrigerator to cool,and then peel carefully.
40wt.%
Drip the liquidonto the mold.
The Mold and the Gummy Finger
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
28/33
The Mold and the Gummy Finger
Mold: 70JPY/piece(Ten molds can be obtainedin the PCB.)
Gummy Finger: 50JPY/piece
Resolution of F ingerpr int Images
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
29/33
Resolution of F ingerpr int Images
Pores can be observed.
Captured Fingerprint Image ofthe Gummy Finger
with the device H (a capacitive sensor)Enhanced Fingerprint
Experimental Results
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
30/33
p
f rom Residual F ingerpr ints (for 1 subject)
0
20
40
60
80
100
A B C D E F G H I J K Fingerprint Device
TheN
umberof
Acceptance(times/100ate
mpts)
L - L L - A A - L A - A
Character istics of Gummy F ingers
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
31/33
y g
0
100
200
300
400
500
0 50 100 150
Pressure Sensor Output (g)
Tac
tile
Sensor
Ou
tpt(Hz)
Gummy Finger
Live Finger
Moisture Electric Resistance
Live Finger 16% 16 Mohms/cm
Gummy Finger 23% 20 Mohms/cm
Silicone Finger impossible to measure impossible to measure
The compliance was also examined for live and gummyfingers.
Conclusions
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
32/33
Conclusions
There can be various dishonest acts using arti f icial f ingers
against the f ingerprint systems.
Gummy fingers, which are easy to make with cheep, easilyobtainable tools and mater ials, can be accepted by 11 types of
f ingerprint systems.
The exper imental study on the gummy fingers wil l haveconsiderable impact on secur ity assessment of f ingerprint
systems.
Manufacturers,vendors, and users of biometr ic systems shouldcareful ly examine secur ity of their system against arti f icial
clones.
How to treat such information should be an important issue.
For Details
-
8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory
33/33
For Details
Paper:T. Matsumoto, H. Matsumoto, K. Yamada, S. Hoshino,I mpact of Ar tif icial Gummy F ingers on F ingerpr int
Systems Proceedings of SPIE Vol. #4677,
Optical Secur ity and Counterfeit Deterrence Techniques I V.