Your Skin Is Your Password

An anonymous reader writes: "Technology Review is running a story outlining a process which uses light to uniquely identify a person through their skin. The light reflects through a person's skin and is uniquely reflected back to a receiver. The researchers believe that this has some major applications including improving hand gun saftey locks and preventing cellular phone theft."

Comments

I have this giant wart on my finger

[PD]

And dammit it's right on the tip of my index finger. Biometric systems need to be able to account for variation over time. What happens if a person gets a tan? Or develops some new freckles, or a mole?

These devices really have to be perfect. False negatives are one thing, but even one false positive completely destroys the usefulness of the device.

Re:I have this giant wart on my finger

[liquidice5]

I agree

what about the handgun thing
what if you are being attacked and your gun wont recognize you because you are sweating profusely??

What about dirty hands?

I believe that biometric systems will not be completely accurate until they use DNA from blood
(like in Gattaca) (but, then also like in Gattaca, they can be fooled)

but then there is privacy issues and things like that.

Re:I have this giant wart on my finger

[PD]

We've got to combine these things

-something you are - biometric data
-something you have - a physical key of some kind
-something you know - a password or PIN

Re:I have this giant wart on my finger

[Goldberg's Pants]

All this biometric stuff just reminds me of the episode of Red Dwarf where Kryten and Lister are deleted from existence and use a severed hand to access a door.

This means someone could skin me alive to access my Hotmail account...

Re:I have this giant wart on my finger

[b_pretender]

The biometric will suffice for the "physical key of some kind". Remember, though, according to Scheier, biometrics are easily bypassed. The something you know part, can be replaced by one of those smart cards with a constantly changing password. Those cards are generally more secure than biometrics and passwords.

Re:I have this giant wart on my finger

[kuhnert]

Good point.
The only thing that is pro-biometics is the general hype that this company tries to exploit. If you have a closer look, biometrics have a lot of disadvantages from a security point of view:

• Biometric data cannot be hidden from attacers
• If you know unauthorized access has been gained, you cannot change the "password"

Thus biometrics are convenient, but insecure.

Re:I have this giant wart on my finger

[glock22]

Uncle Mike's makes a holster for police which requires finger print verification before releasing the handgun from the holster. Strangely, I can't find that product on their Law Enforcement Holster page. [shrug] The product brochure/catalog I read (and this random site, description halfway down the page) both claim that it takes about a second for the system to work. That's one second just to start clearing the holster, then you have to bring it to bear.

One training center claims that they can train you to draw and fire two good shots in 1.5 seconds, and a man who used to run the sheriff's armory told me that he would train deputies to draw and fire from a standard police holster in 1.65 seconds.

Now add one full second to those times. Then think about how far you can run in 2-3 seconds. That aggresive man with a knife is now much closer to our police officer than he would have been otherwise. In the case of firearms we must remember that speed is going to be an issue. If it's not fast, I don't want it. Make it fast, and I'll look at it.

Uh oh..

[Xunker]

Phone theft

[andy@petdance.com]

Well, it won't really prevent cellular phone theft, although it will probably make them not so appealing as a target.

Re:Phone theft

[rtaylor]

Its cold here. Some of us wear gloves.

This isn't going to work very well.

Re:Phone theft

[quantaman]

Its cold here.

The http://www.zort.ca says it all :)

Different How?

[avalys]

How is this terribly different from a fingerprint?

Re:Different How?

[unDiWahn]

Well, let's go read the article:

"Unlike biometrics like fingerprinting and face recognition (see "Face Recognition", TR Nov 2001), light printing doesn't rely on image-processing. Instead, the device measures wavelengths of reflected light, which requires considerably less computing power."

So, its a fairly different method, meaning different solutions to it application.

"Norton says, "but the point is that fingerprint technology cannot determine 'liveness.' You can't foil the Lumidigm system with fake or dead tissue.""

So, maybe it's more reliable?

Either way tho, I agree with the guy down there who disbelieves it -- if you're measuring the wavelength of reflected light, couldn't that change drastically (enough to make it useless) over time?

Re:Different How?

[dbrutus]

In a world where the biologists are working in creting organs this is not a long term reliable method. Just splice into the data stream of some entryway using this system (you can probably set up your own) and then calculate how to make an object provide the same reflectivity characteristics. Once you create the fake, voila the method is defeated.

haha

[kasper37]

unfortunately 90% of the hackers' logins could be bypassed using a single sheet of plain white paper.

Skin

[Anonymous Coward]

Make sure not to get a tan this weekend, your [insert appliance here] might think you're a thief.

Re:Skin

[Anonymous Coward]

Make sure not to get a tan this weekend, your [insert appliance here] might think you're a thief.


is that because thieves have dark skin?

Re:Skin

[dbrutus]

Would it have been as funny to say visit the tanning salon, you don't want your [insert appliance here] to call you a thief come February. Changing skin appearance goes one of two ways from dark to light or light to dark. For the slashdot crowd though, I'd guess that the normal average appearance is pretty untanned.

What about the speed of light slowing down...

[C.U.T.M.]

I hope they have taken into account the fact that the speed of light is slowing down. Maybe if you fly through space you can't be identified anymore!!

protecting us where it matters most

[fist_187]

finally america will be safe from cellular phone theft.

Re:protecting us where it matters most

[cpeterso]

agreed. Cell phones are practically free these days..

Wonderful.

[Lendrick]

This means that eventually they'll be able to place a large infrared light out in a public place and be able to identify everyone who walks through using minimal computer power.

Attempts at face recognition so far have been encouragingly laughable. If this is everything it's cracked up to be, it may eventually be able to fill the niche that face recognition was supposed to.

Of course, it sounds like right now the light has to be very close to the skin for it to work. Perhaps there are inherent limitations in the system that will prevent it from working over large areas.

changing skin

[borgasm]

Correct me if I'm wrong, but doesn't our skin go through changes almost daily. We shed skin cells, we grow new ones...etc

I can't imagine that this technique could be very reliable...what if you get a bad sunburn or a "good" suntan.

I guess you could measure that itsy bitsy piece of skin that never sees sunlight...but this isn't common to everyone, and even that must go through changes.

I suppose these are some of the questions that must be answered in all fields of biometrics before we have a comprehensive identity solution.

Perhaps combine this with traditional methods...

[Anonymous Coward]

"I think this was slightly overblown," Norton says, "but the point is that fingerprint technology cannot determine 'liveness.' You can't foil the Lumidigm system with fake or dead tissue."

Or Gelatine.

This, combined with traditional fingerprinting, would be pretty damn accurate as far as I can see. I'll leave the privacy knee-jerks to other people, I'm really far too tired at the moment. ;-)

Ali

I wonder...

[MrIcee]

Can this really be a good biometric? First, I would wonder what the differences were say, between twins or triplets? Do their skins reflect the same (e.g., could one twin use the other twins gun)? Likewise for genetic offspring - to what degree are, say, 12 children of the same parents going to have vastly different signatures? Perhaps they do.

It also strikes me odd that they say it would be very difficult to foil. If the device is merely monitoring the response to a flash of light, one would think it would be fairly easy to create a *fuzz buster* (as it were) that sends out a false signal. Or even a *gummy bear* that just absorbs correctly.

Also, if a *living* person is required (e.g., it senses blood flow or something like that) than on would wonder how hard it would be to add a filter over your own skin that would change your index to that of someone else. Or how about injecting your skin with a material that changes your index.... or merely soaking your skin in water until it prunes (does that affect things?).

I can't imagine that this is at all foolproof. And I can cetainly bet that if crimes are committed using a gun that utilizes this technology, sooner or later someone will be framed by faking the technology out.

Shades of "Logan's Run"

[infonography]

I like the idea of a non-invasive identifier. (Sandmen's weapons in 'Logan's Run' where keyed to the user alone)

I wonder...

[phagstrom]

...how it would handle people with psoriasis (or similar skin conditions)....

Maybe they just have to 'change' their password more often ;-)

Handguns

[Anonymous Coward]

I understand that this might prevent handgun theft, however a lot of shootings are done by the rightful owner of the weapon (e.g. that case with the guy who calmly went through all the checks and chill-out periods and then shot his girlfriend).
I am not sure if crimes with stolen guns prevail statistically, but this is definitely not a panacea.
Maybe there are other applications for this technology, e.g. laptop security or something? Don't forget roaming desks via thin clients.

Re:Handguns

[cra]

I bet it could be used to prevent waste of copying paper and toner by not letting the funny-people at the office xerox their tits/a$$es/whatever. Or keeping me from showering with my pajamas on every monday morning.

How much money should be spent...

[cra]

... on preventing phone theft? I wouldn't pay an extra $50 for a phone with a system making it a bit less attractive to steal, when I can have a phone without such a system for $5. On gun control it might be a good idea, although the bad guys would bypass the system somehow, and any weapon owner with half his brain intact has a lockable cabinet for his gun(s).

Is this a Q3 issue?

[Anonymous Coward]

How many skins can there be?