Slashdot Mirror
New VibWrite System Uses Finger Vibrations To Authenticate Users (bleepingcomputer.com)
An anonymous reader quotes a report from Bleeping Computer: Rutgers engineers have created a new authentication system called VibWrite. The system relies on placing an inexpensive vibration motor and receiver on a solid surface, such as wood, metal, plastic, glass, etc.. The motor sends vibrations to the receiver. When the user touches the surface with one of his fingers, the vibration waves are modified to create a unique signature per user and per finger. Rutgers researchers say that VibWrite is more secure when users are asked to draw a pattern or enter a code on a PIN pad drawn on the solid surface. This also generates a unique fingerprint, but far more complex than just touching the surface with one finger. During two tests, VibWrite verified users with a 95% accuracy and a 3% false positive rate. The only problem researchers encountered in the live trials was that some users had to draw the pattern or enter the PIN number several times before they passed the VibWrite authentication test. Besides improvements to the accuracy with which VibWrite can detect finger vibrations, researchers also plan to look into how VibWrite will behave in outdoor environments to account for varying temperatures, humidity, winds, wetness, dust, dirt, and other conditions. This new novel user authentication system is described in full in a research paper entitled "VibWrite: Towards Finger-input Authentication on Ubiquitous Surfaces via Physical Vibration."
Mine changes with every cup of coffee!
Good luck with this!
I hear it has a good buzz from the users.
No matter what it is, fingerprints, voice prints, retinal scans, finger vibrations, deep alpha waves of the brain, characteristic whorls in your scalp, the unique biota of bacteria living in your colon... it does not matter what it is. It gets digitized and gets transmitted. If the digitized data is compromised, then there is no way for the user to change these things. They make particularly bad authentication tokens. Governments and spy agencies would love such unalterable tags on people. But it does not solve the problem of authentication.
What we need is a true two factor authentication. Something I have physically. Something I can change if it is compromised. I use an RSA id key fob I have to login to Schwab. If they discover a flaw, and the randmoizer seed was hard wired, something leaked, some employee was bribed to sell some key info about it to random criminals... We can change the key fob. How am I going to change my fingerprint or voice print or thumb vibrations, if that authentication mechanism was compromised?
sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
I already authenticate with my wife with my finger vibrations
what about reader to reader differences?
some installs may not be down the same MM spacing.
how often does it need calibration?
Biometrics are good for identification, they are not so good for authentication
Hmm, "3% false positive rate" and "some users had to draw the pattern or enter the PIN number several times". Somehow I don't see this catching on anytime soon. People will abandon it quickly if it doesn't give them easy access to their stuff. On the other hand, if they stick with it, 3% of the time it will let some (presumably) totally random person in.
my voice is my passport verify me
You cut your finger, put on a band-aid, and you are locked out of your account.
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
We've been expecting you.
A 3% false positive rate is supposed to be meaningful? That means that 1 out of 33 people who try to login to something they are not authorized for will get in? How is this meaningful in any way? That number needs to decrease by several orders of magnitude before this wacky kludge of an idea should even be considered.
Do you know how many false positives you get from a password? Exactly the odds of someone typing your password in by random, or by guessing. If you pick a reasonable password, that figure will be astronomically small.
This device sounds to me like it hasn't even passed the proof-of-concept stage yet.
You are in a maze of twisty little passages, all alike.
they want us to give them the finger?
No problem.
You cut your tongue, I don't understand you.
You sucked on an ice cube, and don't match original version
You are breathing hard, voice doesn't match original
If I only have 3 tries to enter 'password' before lock-delay starts, or full-lock happens, then 95% success is pure failure.
Does this work when I'm wearing work or fashion gloves, or when it is cold & trying to unlock something?
Every spook agency can help itself to your phone if it can just pry open an eyelid on your corpse to open it.
Interesting how ancient 20th century technology keeps getting resurrected as "original ideas".
And I'm sure these folk are taking all the credit for being so "original" and innovative. But since this was not patented (as far as I know) they can probably get away with it. However, this ancient tech was made public ages ago.