FB pixel

Researchers find smartphone fingerprint sensors potentially vulnerable to “MasterPrints”


Smartphone fingerprint sensors could be fooled up to 65 percent of the time by “MasterPrints” digitally composed from common fingerprint features, according to findings published Monday by researchers at New York University and Michigan State University.

In the report MasterPrint: Exploring the Vulnerability of Partial Fingerprint-based Authentication Systems, the researchers warn that partial fingerprint-based authentication systems are potentially vulnerable to compromise, particularly when multiple impressions of each finger are enrolled. Enrolling multiple impressions is often required by devices to ensure positive matching, the researchers say, and in some cases users enroll multiple fingers, further expanding the number of impressions a MasterPrint could potentially register a false match to.

The test results are based on computer simulations, and false positive authentications could be much less common in actual use conditions, but still sufficient to attract criminal attention.

“It’s almost certainly not as worrisome as presented, but it’s almost certainly pretty darn bad,” Andy Adler, a professor at Carleton University in Canada who studies biometric security told the New York Times. “If all I want to do is take your phone and use your Apple Pay to buy stuff, if I can get into 1 in 10 phones, that’s not bad odds.”

Study author Dr. Nasir Memon told the Times the results indicate that if someone could design a glove with a MasterPrint on each finger, that person could access 40 to 50 percent of iPhones before reaching the five-attempt limit and being asked for a numerical password. He also said he will continue to use his iPhone’s fingerprint sensor to unlock it.

Clarkson University professor and Center for Identification Technology Research director Stephanie Schuckers pointed out to the Times that there are differences in the software used by the researchers and smartphone vendors, and that anti-spoofing measures currently being studied could potentially defeat MasterPrints.

Article Topics

 |   |   |   | 

Latest Biometrics News


Facewatch, Met police face lawsuits after facial recognition misidentification

Biometric security company Facewatch, which provides facial recognition software to shops across the UK, is facing a lawsuit after its…


Call for bids on Dominican Republic biometric passport deal closes today

The Dominican Republic’s General Directorate of Passports (DGP) is seeking digital identity service providers to acquire, install and maintain new…


Who is looking out for your data? Security in an era of wide-spread breaches

By Vince Graziani, CEO, Idex Biometrics While some of the biggest businesses in the world now rely heavily on data, concern…


ITL’s Alerts App expands biometric portfolio to integrated venue management

Businesses from every sector all face access control challenges to ensure the security and safety of their staff and customers….


Best biometrics use cases become clearer as ecosystems mature

Biometrics are for digital identity, socio-economic development, air travel and remote identity verification, but not public surveillance, the most-read news…


UK Biometrics and Surveillance Camera Commissioner role survives as DPDI fails

UK parliament will not pass data protection legislation during the current session, following the announcement of the general election in…


Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Most Read This Week

Featured Company

Biometrics Insight, Opinion

Digital ID In-Depth

Biometrics White Papers

Biometrics Events