Biometric Security With Hand Geometry Scanning

[Shiva]

All --

I've been evaluating several physical security solutions involving biometric security methods. In doing this, I've been looking at using geometric hand scanning and a PIN code to help secure physical access to a location.

for those that haven't heard of this technology, it uses a camera and mirrors to take a snapsnot of the hand that can analyze up to 31,000 points and 90 individual measurements. It then creates a "template" that is used in conjunction with a PIN to validate a hand. The verification process takes less than a second.

I've worked with several other biometric solutions (fingerprints, retina scanning) in the past, but was disappointed at how easy they were to defeat and how much work went into setting up and managing the system.

This solution seems quite different from others I've seen.

It takes almost no time to complete an enrollment. Other systems I've used can take up to five minutes to get someone set up correctly. Storage on many biometrics systems have been an issue. This system actually compresses its scanned record to just 9 bytes. It also flexes the scan template to deal with issues one might have with their hand like swelling, jewelry, and soft tissue injuries.

Has anyone ever implemented a system like this in an environment they've maintained? This particular system is made by Ingersol-Rand and is marketed under the "Handkey" brand.

We're currently taking the unit through its paces and I'm thinking of any way I can to spoof the system. Has anyone developed a solid process for evaluating this type of security? Any ideas on protocols for beating this type of security?

We threw a lot of crazy ideas out like creating latex, wax, and even Play Dough casts to try and replecate a hand's weight, size, and dimensions.

Any suggestions or input is appreciated!

[hackajar]

are you marketing this, or accually want people's input? Your last post also seemed in realm of a pitch for a PDA?

or maybe I'm just a nut as of late...

[Shiva]

Nah, I'm just a sicko when it comes to stuff like this. I turn into a bit of a zealot and I end up sounding like a late-night infomercial.

I'm just really looking for other opinions on this type of technology. We're looking at installing this solution in all of our locations, and I'm trying to make it as bulletproof as possible.

I knew if anyone has reviewed hand geometry scanning as a security option, they'd be in this forum.

Thanks,

Shiva

[[Syntax]]

Well, If you have TechTV on demand, you might wanna take a look at it right now, Kevin Rose did a thing about "Hacking Biometrics using GummiBears" he shows how to cast a finger print, and then use the mold and melted gummi bears to make a clone of the print that can be used to fool biometric scanners.

Was a half-assed way to do it, and was pretty sloppy on the show, but is related to what you asked. Was entertaining at most to just watch it.. It was available on TTVOD on my cable 2 nights ago.

[AlxRogan]

Where I used to work had a hand geometry biometric on the door to our lab. I wasn't there to set it up or "train" it, but there was one employee who had a very "blocky" hand. He was able to invert his hand, i.e. upside-down, in the scanner and still have it let him in. Don't know the thresholds, but I've seen it done.

FWIW