May 1, 2006 A new pocket device reads fingerprints and validates them by wireless access to a computer. With this biometrics system, users can avoid using passwords, and get simpler and more secure access to bank balances, credit cards, and even buildings.
FAIRFAX, Va.--Online hackers can steal just about anything, from your identity, to your credit cards and bank balance. Now, consumers can fight back. Using the power of touch can protect your personal information.
Dominic DeSantis dares anyone to try and hack into his personal PC files. "I have different files on my desktop that you can't open without passwords," he says.
Tough password tactics may slow down a cyber thief, but it's not foolproof. Now, electrical engineers have developed this new security device that uses a one-of-a-kind access code -- your fingerprint.
"It becomes a personal identification device that you carry with you, and the device only works for you," says Barry Johnson, an electrical engineer at Privaris, Inc., in Fairfax, Va. "The fingerprint, being something that you are, is something you that you will not forget."
With the touch of a finger, online access is a cinch for credit card purchases, viewing bank balances, or checking e-mail -- all without remembering or typing a single password or PIN number. Once you scan your finger, the device compares the scan to your fingerprint data, or biometrics already stored in the device.
"The ability to not only store the fingerprint on the device, and only on the device, but to do that securely is a unique feature of the device," Johnson says. He says the new device can work with existing security systems and also works for access into buildings.
It's a unique way to help consumers like DeSantis stay secure with something he'll never lose.
BACKGROUND: "Spoofing" is the process by which individuals test a biometric security system by introducing a fake sample. This can help companies improve those systems in order to better protect their information and employees. The goal is to make the authentication process as accurate and reliable as possible.
HOW IT WORKS: Digits from cadavers and fake fingers molded from plastic, or even play dough or gelatin, can potentially be misread as authentic by biometric security systems. Electrical and computer engineers are addressing this issue by trying to "spoof" such systems in hopes of designing more effective safeguards and countermeasures. One such study found a 90 percent false verification rate; the scanning machines could not distinguish between a live sample and a fake one. The system was modified to detect the pattern of perspiration from a live finger, which reduced the false verification rate to less than 10 percent.
WHAT IS BIOMETRICS: Biometrics is the science of using biological properties such as fingerprints, an iris scan, or voice recognition to identify individuals. These unique "signatures" can be used to authenticate or determine identity. Biometric security systems are growing in popularity, popping up in hospitals, banks, even college residence halls to authorize or deny access to medical files, financial accounts, or restricted areas.
ABOUT FINGERPRINTS: A fingerprint is an imprint made by the pattern of ridges on the pad of a human finger, believed to provide traction for grasping objects. When someone touches something with his fingers, he leaves behind a residue of the touched surface in the pattern of that fingerprint. Brushing the surface with a finely ground powder, like chalk or coal, can make the print visible because the powder adheres to the residue but not the surrounding surface. Invisible prints are called latent prints; there are other chemical techniques to make those visible. There are three basic patterns: the arch, the loop and the whorl. These can be broken down into other classifications. A person's fingerprints are believed to be unique. The practice of comparing fingerprints -- such as those found at a crime scene to those of a suspect -- is called dactyloscopy. The FBI maintains a large database of more than 49 million fingerprint records for known criminals.
The Institute of Electrical and Electronics Engineers, Inc., contributed to the information contained in the TV portion of this report.