Fingerprint recognition in mobile devices

60 pts.
Tags:
Biometrics
Mobile security
I have certain specific questions with fingerprint scanning as I look at it from a information security perspective.
  • How does mobile fingerprint recognition actually work?
  • Additionally, is there any specific method all manufacturers follow?
  • What is the best way to make fingerprint recognition very secure?
  • Which algorithms are used in the mobile devices to store fingerprints and make it secure? .
As far as I know, fingerprint recognition is not the most secure biometrics. But, maybe encrypting it or hashing the enrollment figure might make it secure.
Please let me know,
Thank You, Saurabh Kulkarni.
0

Answer Wiki

Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

Discuss This Question: 6  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Subhendu Sen
    Fingerprint is more secure than password / pin / proximity card as you mentioned biometrics. Some vendors did a mechanism face recognition which is more secure than fingerprint. However, in our present age, no security can provide you ultimate satisfaction, while they all can break in illegal way. Today security threat is a measure topic in all around. It is your duty to update the system time to time with latest patch/ downloadable files from respective vendor. However manpower & budget both are consider regarding security.
    141,290 pointsBadges:
    report
  • ToddN2000
    Way to flawed for me peace of mind. I saw an episode of Mythbusters on just this security method. They were able to get around it with a little effort. I also read a story where a man was charged hundreds of dollars of in-app purchases. He let his child play games on his phone. Turns out when the man was sleeping his child would take the phone and scans his dads finger to unlock it so he could play unsupervised.
    135,355 pointsBadges:
    report
  • carlosdl
    "...But, maybe encrypting it or hashing the enrollment figure might make it secure."

    The first problem is the possibility of making the biometrics device "think" that you are a person that you are not, by using a "figure" that matches what the device has stored.  That has nothing to do with encryption or similar things.

    That is another layer on top of the already complex issue of securing the information properly, where encryption does play a role.
    85,420 pointsBadges:
    report
  • SNKulkarni
    Hi All,
    Thank you for replying. I posted this question way back ago and got the answer. So, I agree with carlos on encrypting it and hashing it. As per my knowledge, Security of biometrics mainly lies in the Operating Systems of the smartphones.

    Many smartphone (incl. iPhone) uses TrustZone architecture. One of the vital role of this architecture is to encrypt and hash the user's biometric and store in the "Secure World" of the TrustZone architecture.
    60 pointsBadges:
    report
  • Subhendu Sen
    Welcome back in ITKE! Though the query was asked one year back, but this is good that, still now it is useful and can be used for future reference.
    141,290 pointsBadges:
    report
  • SNKulkarni
    Haha. Thanks! I know, security of the mobile devices is still a hot topic within our industry. I would like to help anyone who needs more details about this topic.
    60 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: