Tuesday, February 7, 2012

Is there really a way to break into iris recognition biometric systems ???

If you really have an idea , plz try to help me out ... am promisin you tat i aint gonna break into some high tech U.S system. NEVERTHLESS " CURIOSITY KILLS THE CAT " ...

Is there really a way to break into iris recognition biometric systems ???
Actually, digital genius's answer is only partially correct: most people confuse "iris recognition" with "retina scan". What digital is saying is correct for retina scan. It is not correct for iris recognition systems.

An iris recognition system is non-intrusive. It does not scan. It simply photographs your iris. In that photograph it digitizes the paterns of darker and lighter areas in your iris, and then looks for "unique patterns" of darker and lighter layouts. These patterns are highly unique. More unique than DNA by the way (identical twins have the same DNA).



For breaking into these systems: there is no way known to man to actually fool the recognition system itself. Far as I can tell (and I did look at that), the designers thought of pretty much everything. For example: the software even contains code that verifies that the iris it sees actually belongs to a "living eye". So, the "James Bond approach" of simply wearing a contact lense won't work. Also, you couldn't simply use the eyeball of an authorized person to get access, unless that person was cooperating.



That is, of course, the first way to overcome such a system: get an authorized person to cooperate.



However, the real achilles heel of all technical security systems, biometric and otherwise, are typically the administrative systems behind it.



The systems use a plain old database to store records of digitized iris patterns. You could try to attack this similar to how you attack any other database.

These systems always sits on a network. Again, you could attack the network.

And finally: human beings are the administrators of that system. You could try to social engineer them and sweettalk your way into the computer, adding a digitized version of your own iris pattern into the database table storing the "authorized" patterns.
Reply:biometric systems typically do not look at the iris of an eye, they map the blood vessels at the back of the eye ball.



so unless you can generate random blood vessle patterns, or can get a copy of the file that houses the already mapped out patterns, you are out of luck.


No comments:

Post a Comment