Identification by vein pattern is one of the last bastions of biometric systems that has long resisted hacker attacks. Moreover, it is a coveted goal, as it is used to protect ATMs and high security zones.
For decades, especially in the Asian region, no serious attempts have been made to deceive the recognition systems by drawing veins. This is primarily due to the difficulty of scanning the parameters hidden inside the body.
At the end of December 2018, German engineers were able to trick the vein pattern authentication system through the wax model of the palm of the hand.
First, they developed a method for obtaining a vein pattern. For this, a digital SLR camera was used, from the matrix of which an infrared filter was removed. Due to this, when shooting with a flash, the vein pattern is noticeable in the photograph, even if shooting was carried out from a distance of several meters. The authors note that for scanning deeply located veins in the fingers this is not enough and it is necessary to illuminate the hand with an infrared emitter. Researchers believe that such an installation can be discreetly placed in hand dryers.
Then the picture went through processing, it was printed out and filled with wax imitating the skin. Researchers tested the method on real equipment from two companies: Hitachi and Fujitsu, and demonstrated the method’s operability at their conference. The authors turned to both manufacturers. Hitachi Corporation reviewed the information and thanked the engineers.