Inadequate biometrics systems could be creating a false sense of security in banks, security estates and office blocks, and in effect rolling out a red carpet to criminals, writes MARIUS COETZEE, MD of Ideco.
Biometrics-based security devices, in particular fingerprint readers, are now widely in use across South Africa. But in many cases, they could be creating a false sense of security among enterprises, and worse – serving to enable criminal activities.
This is because not all fingerprint readers are created equal. Although all fingerprint readers use minutiae points to match fingerprints, not all have the ability to detect the difference between real minutiae of a fingerprint and spoofed minutiae. Typically, enterprises investing in fingerprint readers believe the biggest risk facing them is a scenario in which a fraudster or criminal replicates someone else’s finger or fingerprint, and uses it to gain access to a premises or to authenticate their identity. But because most fingerprint readers are manned by cashiers, tellers or security guards, the chances are slim that the fraudster will have an opportunity to introduce an entire fake finger into the process unnoticed.
A lesser known risk, and one far easier for villains to employ, is to fake or ‘spoof’ minutiae. The simplest methods are simply to wind thin thread around the fingertip, or to introduce a series of cuts to the fingerprint. This creates scores of new minutiae points, increasing the risk that the spoofed fingerprint will be a close enough match to that of an authorised person on the estate or bank database. No one should underestimate the ingenuity of criminals – they know the reader uses minutiae points to match them against a profile, and they also know that by introducing a lot of false minutiae points, they will increase the chances of their matching an existing profile on the system. Only the most advanced technology has the ability to differentiate between typical cuts and true minutiae to determine whether a fingerprint has been spoofed or not.
Performance requirements and consequential recourse
Another major risk lies in the fingerprint system’s performance and standards: in many cases, the images they produce are of a low quality and characterised by noise, or they simply do not meet the standards required by law enforcement agencies and courts. This means that in the case of fraud or a criminal opening a bank account using such a fingerprint reader, the biometric records and images generated cannot be processed against the SAPS criminal record system, or indeed most international law enforcement systems.
Equally concerning is the fact that these systems produce images that are of a quality too poor to be admissible as evidence in a court of law. The mere fact that many fingerprint readers used today are not compliant to international standards for evidence and criminal investigation defeats the entire objective of using fingerprints for proof of identity in the FICA or RICA process.
Inadequate biometrics-based identification and security systems therefore, could not only give villains access to accounts and assets; they could also help them to avoid prosecution.
Organisations need be very careful in their choice of biometric devices deployed for customer identification, security and protection of assets, to ensure they are compliant with all key standards and legislation, and that the systems deliver the security they promise.
When selecting systems, organisations need to ask:
– Is it fit for purpose at the site, and for effective governance, risk and compliance?
– Does it fully adhere to regulatory requirements from the process of taking the customer aboard through to post-event audits?
– Can it be spoofed by added minutiae caused by thread, cuts, wrinkles and blisters?
– Does the technology discard false minutiae and only process true minutia?
– Is the data collected by the device, including all records and images, fully compliant to all international standards?
– Can this data be processed against the SAPS criminal record system?
– Is this data accepted as evidence in a court of law?
Always remember that mass adoption does not constitute great technology, but rather great sales effort. A simple “show me how accurate it is”, is always recommended.
Win a Poster Heater with Gadget and Takealot.com
This winter Gadget and Takealot.com are giving away three Poster Heaters, which look like posters but become heaters when you plug them in.
Three Gadget readers will each win a unit, valued at R550 each. To enter, follow @GadgetZA and @Takealot on Twitter and tell us on the @GadgetZA account how many Watts the heater consumes.
What’s the big deal about these heaters? Many of us are struggling to keep the balance between soaring electricity costs and the need to keep warm this winter.
However, the recently launched Poster Heater by EasyHeat and distributed in South Africa by Takealot.com is not only one of the most cost effective electric heaters currently on the market, it is also easy to setup and use.
As the name indicates, it is a poster similar to one you would hang on a wall. But, plug it in and it turns into a 300 Watt heater. The Poster Heater isn’t designed to heat hallways or large rooms, but rather smaller ones like a bedroom or a baby’s nursery or a dressing room.
It uses radiant heating, which means that it heats up in a couple of minutes and the heat is directed at the objects or people around it, quickly taking the chill out of the air and providing a comfortable ambient temperature.
The other advantage of radiant heating is that it doesn’t dry out the air like infrared or gas heaters. Users also don’t have to worry about their children or pets getting too close to it because, even though it gets hot, it can be touched.
To enter the competition follow the steps below:
Competition entry details:
3. The competition closes on 31 July 2018.
4. Winners will be notified via Twitter on 1 August and Takealot.com will be in touch to organise delivery.
5. The competition is only open to South African residents.
Happy Emoji Day! Here’s 10 reasons to be cheerful
First created by Shigetaka Kurita in 1999, the emoji has become a huge part of everyday communication. Whether you love them or hate them, flying dollar bills, applauding hands and rolling eyes are here to stay.
Scientist suggest that the use of emojis will help us gain the same satisfaction from digital interactions as we enjoy from personal contact.
Almost two decades later, and we have over 2600 unique emojis to perfectly express what we feel, thank you Mr Kurita! Join HMD, the home of Nokia phones as we celebrate World Emoji Day on the 17th of July with these interesting emoji facts:
The most popular emoji used is “Person Shrugging”
1. The Nokia 3310 was chosen as one of the first 3 “National” emojis for Finland… it represents unbreakable!
2. South Africa’s favourite emoji is the “Kiss and wink”… how sweet SA!
3. French is the only language where a ‘smiley’ does not top the list for its use
4. On average, over 60 billion emojis are sent on Facebook every day
5. For the first time ever, the Oxford Dictionaries Word of the Year was a pictograph! The “Face with Tears of Joy” was crowned word of the year in 2015
6. According to Emojipedia, some of the most requested emoji’s include afro, a bagel and hands making a heart
7. To include all races, a diversity pack was released in 2017
8. It has become so trendy that the Museum of Modern Art displays the original emoji collection on canvas
9. In 2009, Herman Melville’s classic Moby Dick was completely translated into emoji’s