Biometric Sensor Bypass

The word "biometrics" many immediately associated with fingerprints. And this is true, because devices with fingerprint sensors are currently the most common on the market among access control systems that use biometric parameters.

However, such sensors are not a serious protection system at the present time. It is rather a fashionable toy that is impressive, but no more. There are several very simple, and at the same time, very successful ways of circumventing the system for protecting fingerprint sensors:


1. The easiest way is to “revive” an existing print left by a registered user, breathing on the sensor.
2. Cheating the system with a printed copy of a fingerprint
3. Using an “artificial finger”
')
Many manufacturers of fingerprint sensors introduce control of additional parameters, such as body temperature, pulse, the presence of sweat glands (galvanic skin response). However, the 3rd method allows you to simulate all these parameters, because the finger will be not entirely artificial, but yours, but with a fake fingerprint.

Consider the method of manufacturing the most effective from the point of view of fraud fingerprint sensor "artificial finger".

To make a fake fingerprint, we will need:
1. A sample of the print (in this case, we found it on a glass bottle)
2. Rubber bottle cap
3. Superglue
4. Digital camera
5. Laser printer
6. Computer with Photoshop
7. Transparent film for printing on a printer
8. PVA glue

So, we proceed to the manufacture. Imagine that we have a bottle with a fingerprint of a person who has authorized access to the system:

Apply a few drops of superglue to the lid, wait a few minutes so that the glue is wet and does not flow. Now we cover our sample with a lid with glue so that the glue fumes settle on the organic structure of the print,
pix.academ.org/img/2010/03/08/13e03e7bdc60dbc0611b9b9ac9c23dd7.gif
thereby visually manifesting it on the glass.

Great, now you can take a photo of the print in high definition mode.

Using Photoshop to process the image so as to remove the "dirt and blur." As a result, we should get a clear black and white drawing of the original size.

We print it using a laser printer on a transparent film. Toner creates a three-dimensional structure on the film. Now we apply a thin layer of PVA glue on top of the film.

When PVA hardens, we cut out our fake print, and glue it to our finger with nail polish (you can try superglue if you need a long and tighter look). The imprint is ready:


Methods of making embossed fingerprint may be different. For example, in “Destroyers of Legends” a slightly different approach was shown - etching a skin pattern on a printed circuit board coated with copper.

In my opinion, the most resistant to cracking and at the same time, practical, are the sensors that identify the user according to the pattern of the veins on the palm.

Firstly, it is very difficult to get a sample compared to fingerprint sensors. If you immediately thought about chopping off your hand, then I will hasten to stop you: such systems can also control the presence of circulating blood inside the veins, pulse, and of course the temperature. Moreover, in real conditions, it is difficult to imperceptibly slip another's hand into the system, for example, if a guard is sitting nearby.

In the following posts we will consider the most practical ways to bypass other access control systems.