"SPOOFING"

Welcome to the public CLPEX.com Message Board for Latent Print Examiners. Feel free to share information at will.

"SPOOFING"

Postby Pat A. Wertheim » Thu Jan 01, 2009 2:20 pm

Check out this article -- reminiscent of James Bond (Sean Connery) using a false fingerprint membrane on his finger so the Russian femme fatale could search his print through her closet AFIS and confirm that he was another Russian operative. Do such membranes really exist?

http://www.yomiuri.co.jp/dy/national/20 ... Y01303.htm


S. Korean woman 'tricked' airport fingerprint scan

The Yomiuri Shimbun

A South Korean woman entered Japan on a fake passport in April 2008 by slipping through a state-of-the-art biometric immigration control system using special tape on her fingers to alter her fingerprints, it was learned Wednesday.

According to sources, the woman, 51, was deported from Japan in 2007 for staying illegally. However, she was found in August 2008 to have reentered the country and was detained by the Tokyo Regional Immigration Bureau.

The woman was quoted as telling the immigration bureau that she put special tape on her index fingers to cheat the fingerprint scanner at immigration.

The biometric system was introduced at 30 airports around the country in November 2007, and was aimed mainly at preventing entry by international terrorists. A scanner reads the index fingerprints of both hands and instantly crosschecks these with a database of international fugitives and foreigners with deportation records.

The sources said the fact that the woman was so easily able to beat the sophisticated computer system will force the government into a drastic review of its counterterrorist measures and the current screening immigration system.

The immigration bureau reported to the Justice Ministry that a considerable number of South Koreans might have entered Japan illegally using the same technique, as a South Korean broker is believed to have helped the woman enter Japan. The ministry also has begun an investigation into the case.

According to immigration officials, the bureau held the woman in mid-July 2007 for working illegally in the city of Nagano as a hostess after her tourist visa expired. She was banned from reentering Japan for five years and deported to South Korea from Narita Airport.

However, the bureau was tipped off by an anonymous source in early August last year that the woman had been seen again in Nagano. The bureau found she was living in an apartment in the city and detained her again on suspicion of violating the Immigration Control and Refugee Recognition Law.

According to the immigration officials, the woman had a forged passport stating that she had passed immigration checks at Aomori Airport in Aomori Prefecture at the end of April last year.

During questioning, the woman allegedly told the immigration bureau that she had bought a forged passport from a South Korean broker who told her to purchase an air ticket for Aomori Airport.

The woman also was quoted as saying that the broker gave her the special tape with someone else's fingerprints on, and that she slipped past the biometric recognition system by holding her taped index fingers over the scanner.

According to an analysis by the bureau, regular adhesive tape does not work, as the scanner fails to read any prints. The results have led the immigration bureau to suspect that the woman might have used a special tape bearing someone else's fingerprints.

Although the bureau detained the woman at an immigration facility for further questioning, she did not provide information that pinpointed what the tape is made of or the South Korean broker before she was deported again in mid-September.

The bureau has compiled a report based on her statements and submitted it to the Justice Ministry. The report says it is conceivable such tape exists and that the South Korean broker might have helped a considerable number of foreigners enter Japan using it.

According to the ministry, the immigration section at Aomori Airport kept images of the woman's fingerprints, but they were imperfect and did not match the genuine fingerprints of the woman.

(Jan. 1, 2009)


In line with a couple of articles on fingerprint forgery and fabrication, I would be very interested in other reported incidents like this one. If you know of others, please email me at foridents@aol.com or reply here with information. Thanks!!!
Pat
Pat A. Wertheim
 
Posts: 838
Joined: Thu Jul 07, 2005 8:48 am
Location: Morrow, GA

Re: "SPOOFING"

Postby rbostrum » Fri Jan 02, 2009 10:39 am

Hi Pat,

I haven't heard of similar real-world incidents but I do have a couple of related papers in my library. These date back to 2002 and 2003 so people may already be familiar with them.

The 1st is a presentation by Tsutomu Matsumoto (Yokohama National Laboratory, Japan) from an ITU-T Security workshop in Seoul, 2002. It is entitled "Importance of Open Discussion on Adversarial Analyses for Mobile Security Technologies -- A Case Study for User Identification". The author describes in some detail methods to create an 'artifical finger' that worked reasonably well with several systems. The 2nd is a thesis by Johan Blommé entitled "Evaluation of biometric security systems against artificial fingers" (Linkoping, 2003). The abstract of the thesis reads, in part:
In this report biometric security systems have been evaluated based on fingerprint scanners. The evaluation method focuses on copies of real fingers, artificial fingers, as intrusion method but it also mentions currently used algorithms for identification and strengths and weaknesses in hardware solutions used.

The artificial fingers used in the evaluation were made of gelatin, as it resembles the surface of human skin in ways of moisture, electric resistance and texture. Artificial fingers were based on ten subjects whose real fingers and artificial counterpart were tested on three different fingerprint scanners. All scanners tested accepted artificial fingers as substitutes for real fingers. Results varied between users and scanners but the artificial fingers were accepted between about one forth and half of the times.

Techniques used in image enhancement, minutiae analysis and pattern matching are analyzed. Normalization, binarization, quality markup and low pass filtering are described within image enhancement. In minutiae analysis connectivity numbers, point identification and skeletonization (thinning algorithms) are analyzed. Within pattern matching, direction field analysis and principal component analysis are described. Finally combinations of both minutiae analysis and pattern matching, hybrid models, are mentioned.

Based on experiments made and analysis of used techniques a recommendation for future use and development of fingerprint scanners is made.

I don't seem to have the original URLs any longer but people can probably search for them using the above information. Alternatively, since PDF attachments do not appear to be allowedfor upload, I can also e-mail copies to any interested party.

Anyway, based on these articles, the short answer to your question appears to be 'yes' -- this type of thing is possible (though perhaps not using 'tape').

I would like to know more about this particular incident. For example, did the 'forged' fingerprints match the identity in the false passport? The article isn't clear but it doesn't sound like that was necessary at all. The article said "A scanner reads the index fingerprints of both hands and instantly crosschecks these with a database of international fugitives and foreigners with deportation records." If this is the case, then the 'forged' prints would not have to match the passport or anyone in particular to achieve the objective. They just have to be from someone who is not in the database.
Brent Ostrum,
Sr Scientific Advisor - Forensic Document Examination
Canada Border Servies Agency, ISTB-SED
Ottawa, Ontario, Canada
User avatar
rbostrum
 
Posts: 18
Joined: Wed Dec 13, 2006 11:20 am
Location: Ottawa, Ontario, Canada

Re: "SPOOFING"

Postby Steve Everist » Fri Jan 02, 2009 12:34 pm

rbostrum wrote:I don't seem to have the original URLs any longer but people can probably search for them using the above information. Alternatively, since PDF attachments do not appear to be allowedfor upload, I can also e-mail copies to any interested party.


Here's the abstract to the Johan Blommé thesis, where the rest can be downloaded (I'm assuming for a fee)
http://liu.diva-portal.org/smash/record ... iva2:17879

Here's the PDF of "Importance of Open Discussion on Adversarial Analyses for Mobile Security Technologies -- A Case Study for User Identification".
http://www.zelja.com/AdminHeaven/misc/s ... anners.pdf
Steve E.
Steve Everist
Site Admin
 
Posts: 405
Joined: Sun Jul 03, 2005 6:27 pm
Location: Bellevue, WA

Re: "SPOOFING"

Postby Pat A. Wertheim » Sat Jan 03, 2009 8:11 am

When I started my original research into forgery and fabrication in 1992, I found dozens of articles, even a book, on fingerprint forgery -- all from the hypothetical perspective. I could only find one single reported case of forgery in a century of fingerprint usage. Lots of hypotheticals, lots of fiction, no actual cases except that one. With spoofing, I found thousands of sites on the internet, but again -- a dearth of actual known cases. Hundreds might say they have done it at home and it can work, but how many actual cases are there? Those are what I'm looking for, more than the papers that say it *can* be done. The article cited above is the first actual reported case I have read about. Are there any more?

Thanks,
Pat
Pat
Pat A. Wertheim
 
Posts: 838
Joined: Thu Jul 07, 2005 8:48 am
Location: Morrow, GA

Re: "SPOOFING"

Postby AdamH » Thu Jan 08, 2009 11:36 am

This is a reply to Brent Ostrum's question about wanting to know if the prints on the passport have to match the live person's prints. The answer is yes, the prints that are associated with that passport must match the prints of the live person standing at the terminal in the airport. If they do not match then an alert goes off and the prints have to be verified by a live person. I used to work in the office where this happened and we received many alerts that had to be verified (mainly because someone put their right finger on the scanner when they should be putting their left and vice versa). So whoever this woman got her passport from knew this also.
AdamH
 
Posts: 5
Joined: Tue Oct 28, 2008 6:25 pm
Location: San Diego, CA.

Re: "SPOOFING"

Postby Cindy Rennie » Fri Jan 09, 2009 5:43 pm

Pat,

I was just re-reading an excerpt from Simon Cole's book "More Than Zero", which was published in the Journal of Criminal Law and Criminology (Vol. 95 Number 3) (OK. so it's a slow night), and I saw this reference to cases where "fraudulent intent has been fairly clearly documented".

Nelson E. Roth, The New York State Police Evidence Tampering Investigation, Report to the Honorable George Pataki, Governor of the State of New York (1997);

Boris Geller et. al, A Chronicological Review of Fingerprint Forgery, 44 J. Forensic Sci. 963 (1999)

Boris Geller et. al, Fingerprint Forgery - A Survey, 46 J. Forensic Sci. 731 (2001);

Pat A. Wertheim (who?) Detection of Forged and Fabricated Latent prints yadda yadda yadda. 44 J.F.I. 652 (1994).

He also notes,

"The cases of fingerprint fraud, and forensic fraud in general, demonstrate that vigilante forensic scientists often leave ample paper trails that make their misdeeds easily traceable and documentable, once the analyst has been exposed as fraudulent", and then footnotes, "see Barry Scheck et. al. Actual Innocence: When Justice Goes Wrong and How to Make it Right 160-62 (2003)."

You probably have all of these references, but just in case.....

I have to go and wash my hands now.
Cindy Rennie
Senior Fingerprint Technician
SOCO Case Manager
Toronto Police Service
cynthia.rennie@torontopolice.on.ca
Cindy Rennie
 
Posts: 103
Joined: Mon Apr 10, 2006 6:03 am
Location: Toronto, Ontario


Return to Public CLPEX Message Board

Who is online

Users browsing this forum: Google [Bot], Steve Everist and 1 guest