Close
  • Latest News
  • Artificial Intelligence
  • Video
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Subscribe
Logo
  • Latest News
  • Artificial Intelligence
  • Video
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Subscribe
    Home Android
    • Android
    • Mobile

    Researchers Spoof Phone’s Fingerprint Readers Using Inkjet Printers

    Written by

    Todd R. Weiss
    Published March 10, 2016
    Share
    Facebook
    Twitter
    Linkedin

      eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

      Two Michigan State University researchers have used normal off-the-shelf inkjet printers to show how fingerprint readers on popular smartphone models can be tricked into unlocking the devices by using fingerprint copies made with special printer inks.

      The experiments, conducted by researchers Kai Cao and Anil K. Jain of the Department of Computer Science and Engineering at Michigan State University (MSU), found that several popular phone models, including the Samsung Galaxy S6 and Huawei Honor 7, could be tricked into being unlocked using this method.

      Their work was detailed in a research paper, “Hacking Mobile Phones Using 2D Printed Fingerprints,” that was published on Feb. 19.

      The use of fingerprint readers has become prevalent in many available smartphones such as late model Apple iPhones, Samsung Galaxy devices, the HTC One Max and others, but the technology has not been thoroughly vetted against such attacks by hackers, they wrote.

      “It has been forecasted that 50 percent of smartphones sold by 2019 will have an embedded fingerprint sensor,” they wrote. “With the introduction of Apple Pay, Samsung Pay and Android Pay, fingerprint recognition on mobile devices is leveraged for more than just device unlock; it can also be used for secure mobile payment and other transactions.”

      Despite this “growing usage and claimed security of fingerprint recognition for mobile unlock and payment, spoofing attacks on the embedded fingerprint systems have not been investigated in detail,” the researchers wrote. “Spoofing refers to the process where the fingerprint image is acquired from a fake finger (or gummy finger) rather than a live finger.”

      Other researchers have also looked at this issue, including Germany’s Chaos Computer Club, which used a fingerprint lifted off a glass surface to make a copy that was used to break into a device, the paper reported.

      To prove their conclusions, the MSU researchers used a Brother MFC-J5910DW inkjet printer that was loaded with three AgIC4 silver conductive ink cartridges and a normal black ink cartridge, according to their research paper. A fingerprint of a phone’s authorized user was then scanned at 300 dpi or higher resolution and was then reversed or mirrored before being printed onto the glossy side of a piece of AgIC special paper.

      “Once the printed 2D fingerprints are ready, we can then use them for spoofing mobile phones,” the paper continued.

      Using the test Samsung Galaxy S6 and Huawei Honor 7 phones, the researchers “enrolled the left index finger of one of the authors [of the study] and used the printed 2D fingerprint of this left index finger to unlock the fingerprint recognition systems in these phones,” the paper states. The spoofed fingerprint was able to successfully unlock both the Samsung Galaxy S6 and Huawei Honor 7 phones.

      Additional tests confirmed the original results. “We tried several fingers of different subjects and all of them can successfully hack these two phones,” the paper states. “But [the] Huawei Honor 7 is slightly more difficult to hack (more attempts may be required) than [the] Samsung Galaxy S6.”

      The research, they concluded, “further confirms the urgent need for anti-spoofing techniques for fingerprint recognition systems, especially for mobile devices, which are being increasingly used for unlocking the phone and for payment.”

      At the same time, they wrote, “it should be noted that not all the mobile phones can be hacked using the proposed method. As the phone manufactures develop better anti-spoofing techniques, the proposed method may not work for the new models of mobile phones. However, it is only a matter of time before hackers develop improved hacking strategies, not just for fingerprints but other biometric traits as well that are being adopted for mobile phones (e.g., face, iris and voice).”

      Fingerprint security methods are being used by more businesses today. In February, MasterCard announced that it is planning to launch fingerprint and selfie biometric identification options for customers in the United States and in other parts of the world this summer as it finds that users are comfortable and confident with the technology, according to an earlier eWEEK story.

      The expansion of the program, which began last July as a trial project to see how consumers would respond to the use of selfies and fingerprints to replace passwords for their online purchases comes after a large test was conducted in Amsterdam involving some 750 users over six months. With the success of the Dutch tests, MasterCard said it will be launching selfie and fingerprint biometric identification technologies for online purchases in the United States, Canada and parts of Europe in the summer of 2016.

      Todd R. Weiss
      Todd R. Weiss
      Todd R. Weiss is a seasoned technology journalist with over 15 years of experience covering enterprise IT. Since 2014, he has been a senior writer at eWEEK.com, specializing in mobile technology, smartphones, tablets, laptops, cloud computing, and enterprise software. Previously, he was a staff writer for Computerworld.com from 2000 to 2008, reporting on a wide range of IT topics. Throughout his career, Weiss has written extensively about innovations in mobile tech, cloud platforms, security, and enterprise software, providing insightful analysis to help IT professionals and businesses navigate the evolving technology landscape. His work has appeared in numerous leading publications, offering expert commentary and in-depth analysis on emerging trends and best practices in IT.

      Get the Free Newsletter!

      Subscribe to Daily Tech Insider for top news, trends & analysis

      Get the Free Newsletter!

      Subscribe to Daily Tech Insider for top news, trends & analysis

      MOST POPULAR ARTICLES

      Artificial Intelligence

      9 Best AI 3D Generators You Need...

      Sam Rinko - June 25, 2024 0
      AI 3D Generators are powerful tools for many different industries. Discover the best AI 3D Generators, and learn which is best for your specific use case.
      Read more
      Cloud

      RingCentral Expands Its Collaboration Platform

      Zeus Kerravala - November 22, 2023 0
      RingCentral adds AI-enabled contact center and hybrid event products to its suite of collaboration services.
      Read more
      Artificial Intelligence

      8 Best AI Data Analytics Software &...

      Aminu Abdullahi - January 18, 2024 0
      Learn the top AI data analytics software to use. Compare AI data analytics solutions & features to make the best choice for your business.
      Read more
      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Video

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2024 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.