Hacking Mobile Biometrics with the Photograph of a Fingerprint
摘要
Fingerprints are one of the most unique characteristics of an individual and can be used to verify their identity. This method of verification has widespread use in consumer electronics such as mobile phones and laptops, where a user can scan their finger to unlock a device. This workflow contains one major flaw: when a user scans their fingerprint, they leave a behind a copy of it on the scanner. This research sought to determine the viability of a threat actor authenticating to a device using mock fingerprints. By using various methods of collection and fabrication, a mock fingerprint was created that could successfully authenticate to a Google Pixel 7a with a 100% success rate.