Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory

8/11/2019 Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory

1/33

I TU-T Workshop on Secur ity, Seoul

Importance of Open Discussion on

Adversar ial Analyses for Mobile Secur ity

Technologies--- A Case Study for User I dentif ication ---

14 May 2002

Tsutomu MatsumotoGraduate School of Environment and Information Sciences

Yokohama National University

email: [email protected]


2/33

Mobile Security Technologies

Security Architecture

Operating Systems Security

Software Tamper ResistanceMobile Code Security

Physical Tamper ResistanceCommunications Security

Cryptographic Protocol

User Identification


3/33

Adversar ial Analysis

Secur ity assessmentof biometr ic user identi f icationsystems should be conducted not only for the accuracy

of authentication, but also for securi ty against fraud.

I n this presentation we focus on F ingerpr int

Systems which may become widespread forMobile Terminals.

Can we make arti f icial f ingers that fool f ingerprint systems?

Examine Adversar ial Analysis as A Third Party

What are acceptance rates?


4/33

F ingerprint Systems

Typical structure of a fingerprint systemTypical structure of a fingerprint system

Types of sensorsTypes of sensors

Optical sensors

Capacitive sensorsThermal sensors, Ultrasound sensors, etc.

Finger

Finger Data

Feature Extraction

Finger Information Database

Fingerprint System

Enrollment

Verification or Identification

Recording

Capturing

Presenting

Result

Referring

Comparison

L ive and Well Detection


5/33

A Risk Analysis for F ingerprint Systems

Attackers may present

1) the registered finger,by an armed cr iminal, under duress, or with a sleeping

drug,

2) an unregistered finger (an imposter ' s f inger),i .e., non-effort forgery,

3) a severed fingertip from the registered finger,

4) a genetic clone of the registered finger,

5) an arti f icial clone of the registered finger, and

6) the others,

such as a well-known method as a fault based attack.


6/33

Fraud with Artif icial F ingers

Part of patterns of dishonest acts with artificial fingersagainst a fingerprint system.

L(X): A Live Finger corresponding to Person XA(Y): An Artificial Finger corresponding to Person Y

A(Z): An Artificial Finger corresponding to Nobody


7/33

Fraud with Ar tif icial F ingers I

X

L(X)

X

L(X)

EnrollmentEnrollment

A(X)s

Distribution of A(X)sDistribution of A(X)s

Y X

Y obtains A(X).Y obtains A(X).

A(X)

X or Y

AuthenticationAuthentication

A(X)


8/33

Fraud with Ar tif icial F ingers II

Y X

X obtains A(Y).X obtains A(Y).

A(Y)

X

A(Y)

X

A(Y)

X enrolls A(Y).X enrolls A(Y).


A(Y)or L(Y)

X orY

A(Y)s

Distribution of A(Y)sDistribution of A(Y)s


9/33

Fraud with Ar tif icial F ingers III

X Y

Y makes A(X).Y makes A(X).

A(X)

L(X)X

L(X)L(X)

EnrollmentEnrollment

X

A(X)s

Distribution of A(X)sDistribution of A(X)s

Y


A(X)


10/33

Mapping a F ingerpr int onto Ar tif icial F ingers

Finegerprint

Impression

Artificial Finger

e.g., Molds, Residual Fingerprints, ...

e.g., Live Fingers, Generators, ...


11/33

Known Results

Process 0

(1) F inger

(2) Mold

(3) Sil icone Rubber F inger


12/33

Fact

Often AcceptsSilicone Rubber Fingers

Finger

LightSource

Det

ector

Finger

Array of Electrodes

Usually RejectsSilicone Rubber Fingers

Optical SensorOptical Sensor Capacitive SensorCapacitive Sensor


13/33

Gummy F ingers

Our ResultProcess 1(1) F inger

(2) Plastic Mold

(3) Gummy F inger

Our ResultProcess 1(1) F inger

(2) Plastic Mold

(3) Gummy F inger


14/33

Recipe 1-1

Making an Artificial Finger directly from a Live Finger

Solid gelatin sheetGELATINE LEAF

by MARUHA CORP

200JPY/30grams

Free molding plasticFREEPLASTIC

by Daicel FineChem Ltd.

350JPY/35grams

MaterialsMaterials


15/33

Recipe 1-2

Put the plasticinto hot water

to soften it. Press a live fingeragainst it.

The moldIt takes around 10 minutes.

How to make a moldHow to make a mold



16/33

Recipe 1-3


Preparation of material

A liquid in which immersed gelatin at 50 wt.% .

Preparation of material

Add boiling water (30cc) to solid gelatin (30g) in abottle and mix up them.

It takes around 20 minutes.

R i 1 4


17/33

Recipe 1-4


How to make a gummy fingerHow to make a gummy finger

It takes around 10 minutes.

Put it intoa refrigerator to cool.

Pour the liquid

into the mold.

The gummy finger

Si il i t i th L i F i


18/33

Similar i ty with L ive F ingers

The photomicrographs of fingersThe photomicrographs of fingers

(a) Live Finger (b) Silicone Finger (c) Gummy Finger

C t d I


19/33

Captured Images

Captured images with the device C (an optical sensor).Captured images with the device C (an optical sensor).

(a) Live Finger (b) Silicone Finger (c) Gummy Finger

Captured images with the device H (a capacitive sensor).Captured images with the device H (a capacitive sensor).

(a) Live Finger (b) Gummy Finger

E periments


20/33

Experiments

F ingerprint systems: 11 types

Subjects: five persons whose ages are from 20s to 40s

We attempted one-to-one verification 100 times counting thenumber of times that it accepts a finger presented.

Types of experiments

Experiment Enrollment Verification

Type 1 Live Finger Live Finger

Type 2 Live Finger Gummy FingerType 3 Gummy Finger Live Finger

Type 4 Gummy Finger Gummy Finger

The L ist of F ingerpr int Devices


21/33

The L ist of F ingerpr int Devices

H ardw are S pecifications So ftwa re Spe cific ationsM e thods

M anufacturer /

Selling Agency P ro duc t N am e T yp e

Pr oduc t

N u m b e r Sensor

Live and

We l lDetect ion

M anufacturer /

S e l ling Agency

Product Name

(Application)

Compar i s on

Levels

fo rVerification

D evice ACo m p aq Co m p u ter Corporat ion

Co m p aq S t an d -Alo n eFingerprint IdentificationUni t

D F R-200 E 0 38 11U S 00 1Opt icalSen so r

u n k n o wnCo m p aq Co m p u ter Corporat ion

F in gerprint IdentificationT echnology Sof tw areversion 1.1

1 through 3Minut iaeMatch in g

D evice BM I T S U B I S H IE L E C T R I CC O R P O R A T I O N

Fingerprint R ec ognizer F PR -D T mkII 003 136Opt icalSen so r

u n k n o wnSu m ik in I zu m iCom puter Serv ice co .Ltd .

S ecFP V 1.11 F ix edMinut iaeMatch in g

D evice C N E C C orp or a ti on Fingerprint IdentificationUnit (Prism)

N 7 95 0- 41 9 Y00 00 3 Opt icalSen so r

unk now n N E C C orp ora tion Basic Util i t ies forF in gerprint Identification

Fixed

Minut iae

Match in g(Minut ia andRelat ion)

D evice D OMRON Co rp o ra t i o nFingerprint RecognitionSensor

FP S-100 0 9 050 085 4Opt icalSen so r

unk now n O M R O N C or por ation"Y U B I PA S S" U.are.U F in gerprint Ver ificationSo f tware

FixedMinut iaeMatch in g

D evice E Sony Corporat ionSony F ingerpr in tIdentification U nit

F IU -00 2-F11 0 07 09Opt icalSen so r

Live Fingerdetection

T S U B A SA S Y S T E MC O . , L T D .

F in gerprint IdentificationU n it W in do ws9 5In teract ive Demo Ver sion1 .0 Bu i ld 13

1 through 5Pat ternmatch ing

D evice F FU J IT SU L IM IT E D Fingsensor FS-2 00U 00 A A 0 002 57Capaci t ive

Sen so r unknow n F U JIT S U L IM IT ED

Logon for Fingsensor V1.0for W indows95/98

FixedMinut iaeMatch in g(Correlat ion)

D evice G N E C C orp or a ti onFingerprint IdentificationUnit (Seria l)

P K-FP 002 03 005 29SCapaci t ive

Sen so r unk now n N E C C orp ora tion

Basic Util i t ies forF in gerprint Identification

Fixed

Minut iaeMatch in g(Minut ia andRelat ion)

D evice HSiemens A G (Infineon

Technologies AG )

FingerTIP

E V A L U A T I O N K I T

E V A L U A T I O N -

K IT

C 9 8 4 5 1 -D6 1 0 0 -A9 0 0 -

4

Capaci t ive

Sen so r u n k n o wn

Siemens AG (Infineon

T echnologies AG)

FingerTIP So f twareD ev elo pm en t Ki t (SDK )

V ersion : V0.90 , B eta 3"Dem o P ro g ram "

FixedMin u t i a

match ing

D evice I Sony Corporat ionSony F ingerpr in tIdentification Unit

F IU -710 30 00 398Capaci t ive

Sen so r Live Finger

detectionSystemneeds Inc. Go o d -b y e " PASSWORD" s 1 th rough 5

Pat ternmatch ing

D evice J Secu gen Ey eD m ouse II S M B - 8 0 0 9 6 5 0 1 7 2 0 0 4 O p t i c a lSen so r

u n k n o wn S e c u g e nSecu Desk top 1 . 55 {

1 th ro u g h 9Minut iam atch in g

D evice K Ethenticaethent icat io r MS 3 000 PCCard

M S 3 0 0 0 M 3 0 0 F 2 0 0 9 9 1O p t i c a lSen so r

u n k n o wn EthenticaS ec u r e S u i teRele as e1. 0

F i x e dMinut iam atch in g

Experimental Results


22/33



0

20

40

60

80

100

A B C D E F G H I J K Fingerprint Device

TheN

umberof

Ac

ceptance(ti

mes/100ate

mpts)

L - L L - A A - L A - A

Gummy F ingers


23/33

Gummy F ingers

Our ResultProcess 2(1) Residual F ingerpr int(2) Digital Image Data

(3) Pr inted Circuit Boar

(4) Gummy F inger

Our ResultProcess 2(1) Residual F ingerpr int(2) Digital Image Data

(3) Pr inted Circuit Board

(4) Gummy F inger

Recipe 2 1


24/33

Recipe 2-1

Making an Artificial Finger from a Residual Fingerprint

MaterialsMaterials

A photosensitivecoated Printed CircuitBoard (PCB)10K by Sanhayato Co., Ltd .

Solid gelatin sheet

GELATINE LEAF by MARUHA CORP

200JPY/30grams

320JPY/sheet

Recipe 2-2


25/33

Recipe 2-2

Digital M icroscope

KEYENCE VH6300: 900k pixels

I nkjet Printer

Canon BJ-F800: 1200x600dpi

Residual Fingerprint

Enhancing

Capturing

Fingerprint Image

Image Processing

Transparent Film

Mask

PhotosensitiveCoated PCB

CyanoacrylateAdhesive

Adobe Photoshop 6.0

Printing

Exposing

Developing

Etching

Mold

UV l ight

Recipe 2-3


26/33

Recipe 2 3

A Mask with Fingerprint Images

An Enhanced Fingerprint A Fingerprint Image

Recipe 2-4


27/33

Recipe 2 4

Gelatin Liquid

Put this mold intoa refrigerator to cool,and then peel carefully.

40wt.%

Drip the liquidonto the mold.

The Mold and the Gummy Finger


28/33

The Mold and the Gummy Finger

Mold: 70JPY/piece(Ten molds can be obtainedin the PCB.)

Gummy Finger: 50JPY/piece

Resolution of F ingerpr int Images


29/33

Resolution of F ingerpr int Images

Pores can be observed.

Captured Fingerprint Image ofthe Gummy Finger

with the device H (a capacitive sensor)Enhanced Fingerprint



30/33

p

f rom Residual F ingerpr ints (for 1 subject)

0

20

40

60

80

100

A B C D E F G H I J K Fingerprint Device

TheN

umberof

Acceptance(times/100ate

mpts)

L - L L - A A - L A - A

Character istics of Gummy F ingers


31/33

y g

0

100

200

300

400

500

0 50 100 150

Pressure Sensor Output (g)

Tac

tile

Sensor

Ou

tpt(Hz)

Gummy Finger

Live Finger

Moisture Electric Resistance

Live Finger 16% 16 Mohms/cm

Gummy Finger 23% 20 Mohms/cm

Silicone Finger impossible to measure impossible to measure

The compliance was also examined for live and gummyfingers.

Conclusions


32/33

Conclusions

There can be various dishonest acts using arti f icial f ingers

against the f ingerprint systems.

Gummy fingers, which are easy to make with cheep, easilyobtainable tools and mater ials, can be accepted by 11 types of

f ingerprint systems.

The exper imental study on the gummy fingers wil l haveconsiderable impact on secur ity assessment of f ingerprint

systems.

Manufacturers,vendors, and users of biometr ic systems shouldcareful ly examine secur ity of their system against arti f icial

clones.

How to treat such information should be an important issue.

For Details


33/33

For Details

Paper:T. Matsumoto, H. Matsumoto, K. Yamada, S. Hoshino,I mpact of Ar tif icial Gummy F ingers on F ingerpr int

Systems Proceedings of SPIE Vol. #4677,

Optical Secur ity and Counterfeit Deterrence Techniques I V.

Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory

Documents

Transcript of Artificial Fingers for Fingerprint Scanners - Matsumoto Laboratory