Menu Close

Another idea for biometric authentication – and two threats

A U.S. researcher says he has written an algorithm that uses hand and behavioral biometrics to authenticate identities. The presumed advance is intended to address increasing vulnerabilities seen in two steps back for biometric security.

The researcher, Chen Wang at Louisiana State University, wanted to make devices more secure without biometrics scanning, aspects of which are increasingly easy to attack. His answer, according to LSU, is to make a hand into a kind of sounding board.

A service wanting to authenticate someone on a phone would transmit to the person largely inaudible ultrasound in narrow frequencies between 17 and 22 kHz. The sounds would make the phone vibrate in a person’s hand.

And, critically, the sound would be absorbed and reflected by the person’s hand.

Everyone’s hands are unique – different gripping actions and strength (a behavioral biometric), finger lengths and widths and palm size. All of these vibrations from multiple sources would be a new kind of biometric scan, picked up by the phone’s mic and relayed to the authentication service for analysis.

As if to underline the fact that new and more-sophisticated identity protections are needed, Aukland (New Zealand) University researchers used a $40,000 (US$24,7562) lidar scanner and a 3D printer in a simulated presentation attack.

According to TVNZ, a state-owned commercial news broadcaster, the researchers had mixed success creating ruddy-hued doppelgängers.

And then there are the voice attackers. People are using voice algorithms to scam people out of money over the phone. Fraudsters try to convince people that a friend or relative needs cash as soon as possible.

Reporting by The Washington Post illustrates how deepfake voices are tricking people out tens of thousands of dollars and how governments do not yet have a firm handle on how to deal with the crimes. A U.S. researcher says he has written an algorithm that uses hand and behavioral biometrics to authenticate identities. The presumed advance is intended to address increasing vulnerabilities seen in two steps back for biometric security.

The researcher, Chen Wang at Louisiana State University, wanted to make devices more secure without biometrics scanning, aspects of which are increasingly easy to attack. His answer, according to LSU, is to make a hand into a kind of sounding board.

A service wanting to authenticate someone on a phone would transmit to the person largely inaudible ultrasound in narrow frequencies between 17 and 22 kHz. The sounds would make the phone vibrate in a person’s hand.

And, critically, the sound would be absorbed and reflected by the person’s hand.

Everyone’s hands are unique – different gripping actions and strength (a behavioral biometric), finger lengths and widths and palm size. All of these vibrations from multiple sources would be a new kind of biometric scan, picked up by the phone’s mic and relayed to the authentication service for analysis.

As if to underline the fact that new and more-sophisticated identity protections are needed, Aukland (New Zealand) University researchers used a $40,000 (US$24,7562) lidar scanner and a 3D printer in a simulated presentation attack.

According to TVNZ, a state-owned commercial news broadcaster, the researchers had mixed success creating ruddy-hued doppelgängers.

And then there are the voice attackers. People are using voice algorithms to scam people out of money over the phone. Fraudsters try to convince people that a friend or relative needs cash as soon as possible.

Reporting by The Washington Post illustrates how deepfake voices are tricking people out tens of thousands of dollars and how governments do not yet have a firm handle on how to deal with the crimes.  Read More   

Generated by Feedzy

Disclaimer

Innov8 is owned and operated by Rolling Rock Ventures. The information on this website is for general information purposes only. Any information obtained from this website should be reviewed with appropriate parties if there is any concern about the details reported herein. Innov8 is not responsible for its contents, accuracies, and any inaccuracies. Nothing on this site should be construed as professional advice for any individual or situation. This website includes information and content from external sites that is attributed accordingly and is not the intellectual property of Innov8. All feeds ("RSS Feed") and/or their contents contain material which is derived in whole or in part from material supplied by third parties and is protected by national and international copyright and trademark laws. The Site processes all information automatically using automated software without any human intervention or screening. Therefore, the Site is not responsible for any (part) of this content. The copyright of the feeds', including pictures and graphics, and its content belongs to its author or publisher.  Views and statements expressed in the content do not necessarily reflect those of Innov8 or its staff. Care and due diligence has been taken to maintain the accuracy of the information provided on this website. However, neither Innov8 nor the owners, attorneys, management, editorial team or any writers or employees are responsible for its content, errors or any consequences arising from use of the information provided on this website. The Site may modify, suspend, or discontinue any aspect of the RSS Feed at any time, including, without limitation, the availability of any Site content.  The User agrees that all RSS Feeds and news articles are for personal use only and that the User may not resell, lease, license, assign, redistribute or otherwise transfer any portion of the RSS Feed without attribution to the Site and to its originating author. The Site does not represent or warrant that every action taken with regard to your account and related activities in connection with the RSS Feed, including, without limitation, the Site Content, will be lawful in any particular jurisdiction. It is incumbent upon the user to know the laws that pertain to you in your jurisdiction and act lawfully at all times when using the RSS Feed, including, without limitation, the Site Content.  

Close Bitnami banner
Bitnami