Close
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Android
    • Android
    • Mobile

    Researchers Spoof Phone’s Fingerprint Readers Using Inkjet Printers

    By
    Todd R. Weiss
    -
    March 10, 2016
    Share
    Facebook
    Twitter
    Linkedin
      fingerprint reader

      Two Michigan State University researchers have used normal off-the-shelf inkjet printers to show how fingerprint readers on popular smartphone models can be tricked into unlocking the devices by using fingerprint copies made with special printer inks.

      The experiments, conducted by researchers Kai Cao and Anil K. Jain of the Department of Computer Science and Engineering at Michigan State University (MSU), found that several popular phone models, including the Samsung Galaxy S6 and Huawei Honor 7, could be tricked into being unlocked using this method.

      Their work was detailed in a research paper, “Hacking Mobile Phones Using 2D Printed Fingerprints,” that was published on Feb. 19.

      The use of fingerprint readers has become prevalent in many available smartphones such as late model Apple iPhones, Samsung Galaxy devices, the HTC One Max and others, but the technology has not been thoroughly vetted against such attacks by hackers, they wrote.

      “It has been forecasted that 50 percent of smartphones sold by 2019 will have an embedded fingerprint sensor,” they wrote. “With the introduction of Apple Pay, Samsung Pay and Android Pay, fingerprint recognition on mobile devices is leveraged for more than just device unlock; it can also be used for secure mobile payment and other transactions.”

      Despite this “growing usage and claimed security of fingerprint recognition for mobile unlock and payment, spoofing attacks on the embedded fingerprint systems have not been investigated in detail,” the researchers wrote. “Spoofing refers to the process where the fingerprint image is acquired from a fake finger (or gummy finger) rather than a live finger.”

      Other researchers have also looked at this issue, including Germany’s Chaos Computer Club, which used a fingerprint lifted off a glass surface to make a copy that was used to break into a device, the paper reported.

      To prove their conclusions, the MSU researchers used a Brother MFC-J5910DW inkjet printer that was loaded with three AgIC4 silver conductive ink cartridges and a normal black ink cartridge, according to their research paper. A fingerprint of a phone’s authorized user was then scanned at 300 dpi or higher resolution and was then reversed or mirrored before being printed onto the glossy side of a piece of AgIC special paper.

      “Once the printed 2D fingerprints are ready, we can then use them for spoofing mobile phones,” the paper continued.

      Using the test Samsung Galaxy S6 and Huawei Honor 7 phones, the researchers “enrolled the left index finger of one of the authors [of the study] and used the printed 2D fingerprint of this left index finger to unlock the fingerprint recognition systems in these phones,” the paper states. The spoofed fingerprint was able to successfully unlock both the Samsung Galaxy S6 and Huawei Honor 7 phones.

      Additional tests confirmed the original results. “We tried several fingers of different subjects and all of them can successfully hack these two phones,” the paper states. “But [the] Huawei Honor 7 is slightly more difficult to hack (more attempts may be required) than [the] Samsung Galaxy S6.”

      The research, they concluded, “further confirms the urgent need for anti-spoofing techniques for fingerprint recognition systems, especially for mobile devices, which are being increasingly used for unlocking the phone and for payment.”

      At the same time, they wrote, “it should be noted that not all the mobile phones can be hacked using the proposed method. As the phone manufactures develop better anti-spoofing techniques, the proposed method may not work for the new models of mobile phones. However, it is only a matter of time before hackers develop improved hacking strategies, not just for fingerprints but other biometric traits as well that are being adopted for mobile phones (e.g., face, iris and voice).”

      Fingerprint security methods are being used by more businesses today. In February, MasterCard announced that it is planning to launch fingerprint and selfie biometric identification options for customers in the United States and in other parts of the world this summer as it finds that users are comfortable and confident with the technology, according to an earlier eWEEK story.

      The expansion of the program, which began last July as a trial project to see how consumers would respond to the use of selfies and fingerprints to replace passwords for their online purchases comes after a large test was conducted in Amsterdam involving some 750 users over six months. With the success of the Dutch tests, MasterCard said it will be launching selfie and fingerprint biometric identification technologies for online purchases in the United States, Canada and parts of Europe in the summer of 2016.

      Todd R. Weiss
      As a technology journalist covering enterprise IT for more than 15 years, I joined eWEEK.com in September 2014 as the site's senior writer covering all things mobile. I write about smartphones, tablets, laptops, assorted mobile gadgets and services,mobile carriers and much more. I formerly was a staff writer for Computerworld.com from 2000 to 2008 and previously wrote for daily newspapers in eastern Pennsylvania. I'm an avid traveler, motorcyclist, technology lover, cook, reader, tinkerer and mechanic. I drove a yellow taxicab in college and collect toy taxis and taxi business cards from around the world.

      MOST POPULAR ARTICLES

      Cybersecurity

      Visa’s Michael Jabbara on Cybersecurity and Digital...

      James Maguire - May 17, 2022 0
      I spoke with Michael Jabbara, VP and Global Head of Fraud Services at Visa, about the cybersecurity technology used to ensure the safe transfer...
      Read more
      Cloud

      Yotascale CEO Asim Razzaq on Controlling Multicloud...

      James Maguire - May 5, 2022 0
      Asim Razzaq, CEO of Yotascale, provides guidance on understanding—and containing—the complex cost structure of multicloud computing. Among the topics we covered:  As you survey the...
      Read more
      Big Data and Analytics

      GoodData CEO Roman Stanek on Business Intelligence...

      James Maguire - May 4, 2022 0
      I spoke with Roman Stanek, CEO of GoodData, about business intelligence, data as a service, and the frustration that many executives have with data...
      Read more
      IT Management

      Intuit’s Nhung Ho on AI for the...

      James Maguire - May 13, 2022 0
      I spoke with Nhung Ho, Vice President of AI at Intuit, about adoption of AI in the small and medium-sized business market, and how...
      Read more
      Applications

      Cisco’s Thimaya Subaiya on Customer Experience in...

      James Maguire - May 10, 2022 0
      I spoke with Thimaya Subaiya, SVP and GM of Global Customer Experience at Cisco, about the factors that create good customer experience – and...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2021 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×