impact of 3d printing on fingerprint spoofing€¦ · one of these new technologies is 3d printing,...
TRANSCRIPT
Impact of 3D Printingon Fingerprint Spoofing
July 2015 | novetta.com | Copyright © 2015, Novetta, LLC.
3D Fingerprints 2015 FIN.indd 1 9/17/15 1:45 PM
Impact of 3D Printing on Fingerprint Spoofing
1 · INTRODUCTION
2 · APPLICATIONS OF 3D SCANNING AND PRINTING IN BIOMETRIC SYSTEMS
2 · EXPERIMENTAL METHODS
3 · RESULTS: FIRST ITERATION OF THE 3D PRINTED MOLD
4 · RESULTS: SECOND ITERATION OF THE 3D PRINTED MOLD
5 · DISCUSSION: 3D PRINTING OPTIMIZATION
7 · CONCLUSIONS AND IMPLICATIONS
9 · ABOUT NOVETTA
3D Fingerprints 2015 FIN.indd 2 9/17/15 1:45 PM
PAGE 1IMPACT OF 3D PRINTNG ON FINGERPRINT SPOOFING
INTRODUCTION
Vulnerability testing is one of many ways in which
Novetta evaluates biometric system performance.
Performing vulnerability testing, especially as
it relates to sophisticated biometric artefacts,
requires continuous evaluation of emerging
technologies. The objective of vulnerability
testing is to facilitate the development of robust
biometric systems resistant to physical attacks
using impostor biometrics, or artefacts.
This study investigates whether currently
available commercial 3D printers can produce
artefacts comparable to traditional cooperative
spoofing fabrication methods and whether current
commercial 3D printers prompt a new approach
to vulnerability testing of biometric fingerprint
systems. In this study, artefacts fabricated from
3D printed molds were evaluated for viability as
attack vectors.
3D Fingerprints 2015 FIN.indd 3 9/17/15 1:45 PM
PAGE 2IMPACT OF 3D PRINTNG ON FINGERPRINT SPOOFING
APPLICATIONS OF 3D SCANNING AND PRINTING IN BIOMETRIC SYSTEMS
The rapid prototyping industry has grown in
the past three decades [1] to encompass new
technology and methods while meeting its
objectives of:
• Creating objects diffi cult or impossible to
make with traditional machining techniques.
• Assisting in delivering tangible and intangible
goods on demand.
One of these new technologies is 3D printing, a
layer-by-layer additive method, which enables
fabrication of intricate parts without costly molds
or dies. 3D fabrication techniques have expanded
to include methods for 3D printing metals,
ceramics, cell sustaining bio-tissues, and food [2].
Developments in methodology have infl uenced
the advancement of 2-photon stereolithography
(SLA) [3] allowing fabrication of micron-sized small
parts with never-before encountered resolution.
The models printed in each technique can be
computer generated or derive from scanning
methods.
The fi rst application of 3D scanning in fi ngerprint
biometrics was specialized hardware used
to record a 3D image of the fi nger, gathering
fi ngerprint data without contact or deformation.
One such sensor is AIRprint from Advanced Optical
Systems Inc. which can capture fi ngerprint data
from up to 6 feet away. This technology has been
applied for timekeeping and access control as seen
in applications by Touchless Biometric Systems
[4]. Algorithms have met the need to convert the
acquired data to 2D presentations [5] [6], thereby
making the 3D data backwards compatible with
legacy fl at and rolled fi ngerprint data.
Using 3D printing and 3D scanning for fabricating
biometrically viable fi ngerprint molds or physical
artefacts has not been reported in the literature,
although researchers have experimented with
3D printing for other biometric modalities.
Experiments using 3D printed masks for spoofi ng
facial recognition have been completed, often
with the goal of developing advanced software
to distinguish between genuine and artefact
presentations [7].
EXPERIMENTAL METHODS
Raw data on fi ngerprint 3D structure was captured
using the David Structured Light Scanning (SLS)
system and David 3 software. The relative position
of the camera, object, and scanner, as used in this
study, is show in Figure 1.
Figure 1: Schematic of SLS setup.
PROJECTOR CAMERA
3D Fingerprints 2015 FIN.indd 4 9/17/15 1:45 PM
PAGE 3IMPACT OF 3D PRINTNG ON FINGERPRINT SPOOFING
3D scanning curved objects with micron sized
features presented challenges related to camera
resolution and fi eld of focus. Also, scanning a
fi nger requires multiple individual scans as only a
fraction of the surface can be captured in a single
one. David 3 software was used to merge collected
scans and create a single 3D mesh. This 3D mesh
was then used to generate the digital fi le for 3D
printing, including editing for quality and format.
Solid Concepts, a rapid prototyping service, was
selected primarily due to printer availability. The
PolyJet™ HD from Objet was chosen as the target
printer for its small z-layer thickness (16µm)
and tight x-y plane tolerance (±127 µm) [8]. This
printer uses a process similar to inkjet printing:
Micron-sized droplets of a photopolymer are
deposited by a motor then cured in positon with
a UV light [9]. Any support material used to print
complex parts is washed away following printing.
In the course of this study, two iterations of 3D
printed molds were produced. Both were used
to fabricate biometric artefacts using methods
described in the literature for cooperative molds.
Biometric presentations from fabricated artefacts
were captured using an FBI Appendix F certifi ed
optical fi ngerprint scanner.
RESULTS: FIRST ITERATION OF THE 3D PRINTED MOLD
The fi rst iteration 3D printed mold was printed at
a 1:1 (life size) scale. The 3D mesh fi le used for
printing was based directly on the 3D scanned
fi nger data. The resulting mold (Figure 2)
eff ectively replicated the overall fi nger size and
shape; however, fi ngerprint ridges were absent
from ~80% of the fi ngerprint area.
Ridges and valleys that were present in the mold
and its corresponding artefact were reproduced
at the correct scale. However, due to introduced
topology from the 3D printing process, the fi rst
iteration 3D mold was unable to produce artefacts
of a suffi cient quality for spoofi ng applications.
Figure 3 shows the eff ect of printer motor
movement on droplet deposition in greater detail.
The topology introduced by the motor movement
obscured the faint appearance of ridges and
valleys across the few areas of the fi ngerprint
surface in which they appeared.
Figure 2: First iteration 3D printed mold, locally contrast enhanced using CLAHE to better show surface details.
Figure 3: Macro image of mold showing introduced vertical topology, due to printer movement (illustrated in red), and true Figure 3: Macro image of mold showing introduced vertical topology, due to printer movement (illustrated in red), and true Figure 3: Macro image of mold showing introduced vertical
horizontal topology, representing captured and printed ridges/valleys (illustrated in blue).horizontal topology, representing captured and printed ridges/valleys (illustrated in blue).horizontal topology, representing captured and printed ridges/
3D Fingerprints 2015 FIN.indd 5 9/17/15 1:45 PM
PAGE 4IMPACT OF 3D PRINTNG ON FINGERPRINT SPOOFING
Figure 4 shows the biometric presentation of an
artefact created from the fi rst iteration 3D mold.
The few ridge and valley features identifi able in
the presentation are near the top or sides of the
print area. The core fi ngerprint section is missing
level 2 fi ngerprint features. The ridge and valley
structures that are present have continuous,
introduced, intersecting features making genuine
minutiae points diffi cult to detect. Artefacts
fabricated from this mold are not viable for
spoofi ng attacks.
This presentation neither passed the quality
check nor matched the genuine biometric
reference. Additional examination of the biometric
presentation and mold confi rmed that ridge
and valley structures presented were replicated
accurately.
RESULTS: SECOND ITERATION OF THE 3D PRINTED MOLD
The fi rst printed mold yielded insight into the
feasibility of printing such small features. This
insight was used to redesign a second mold with
more fi ngerprint features. The second printing
included both an increased ridge to valley height
diff erence throughout the biometrically important
fi ngerprint area and an increase in scale from life
sized (1:1 scale) to 1.4:1.
The second iteration 3D printed mold is shown
in Figure 5. The mold exhibited increased feature
size and had signifi cantly more ridges and valleys
present compared to the fi rst iteration printing.
Although the ridge fl ow could be easily detected
within the second iteration mold, minutiae from
ridge endings and bifurcations were more diffi cult
to identify through visual inspection.
As in the fi rst iteration printing, the second
iteration of the 3D printed mold was used to
Figure 5: Second iteration 3D printed mold, locally contrast enhanced using CLAHE to better show surface details.
Figure 4: Biometric presentation of artefact fabricated from fi rst iteration 3D printed mold showing introduced vertical topology, due to printer movement (illustrated in red), and true horizontal iteration 3D printed mold showing introduced vertical topology, due to printer movement (illustrated in red), and true horizontal iteration 3D printed mold showing introduced vertical topology,
topology, representing captured and printed ridges/valleys (illustrated in blue).topology, representing captured and printed ridges/valleys (illustrated in blue).topology, representing captured and printed ridges/valleys
3D Fingerprints 2015 FIN.indd 6 9/17/15 1:45 PM
PAGE 5IMPACT OF 3D PRINTNG ON FINGERPRINT SPOOFING
fabricate an artefact for biometric testing. A rolled
biometric presentation of the resulting artefact is
shown in Figure 6.
Most biometric presentations from this artefact
failed the quality check. Those that passed did
not match the genuine presentation. This was
attributed to missing genuine minutiae from
the presentation and increased false minutiae
attributed to defects.
A fl at presentation and its corresponding detected
minutiae are shown in Figure 7. Areas of unclear
ridge fl ow appear as empty spaces. Most of the
detected minutiae points do not correspond
to genuine minutiae points and were likely
introduced during the printing process.
A visual inspection of the second iteration 3D
printed mold and the resulting artefact revealed
that unlike the fi rst iteration printing, the size
and shape of reproduced ridges and valleys were
inaccurate. In particular the ridge width is too
narrow throughout most of the sample.
DISCUSSION: 3D PRINTING OPTIMIZATION
Current commercial 3D printers have reached a
resolution and accuracy point where it is benefi cial
to experimentally determine their capability
of reproducing a fi ngerprint on a 1:1 scale. The
3D printing specifi cations for the tested printer
are shown in Figure 8 alongside the range of
expected feature sizes within the population. The
x-y tolerance is signifi cantly smaller than average
valley to valley distance [10] and the z-layer
thickness is a fraction of the ridge to valley depth.
Both iterations of the 3D printed molds were
examined to identify possible root causes for the
lack of features present (fi rst iteration) and the
inaccuracy of features present (second iteration).
It was determined that the main limiting factor is
likely the x-y plane tolerance of ±127 µm. This
resulted in the introduced topology overriding the
ridge structures in the fi rst iteration 3D printed
mold and the inaccurately reproduced ridge and
valley structures in the second iteration. The
Figure 6: Biometric presentation of an artefact fabricated from the second 3D printed mold.
Figure 7: Artefact presentation and its corresponding detected minutiae.
3D Fingerprints 2015 FIN.indd 7 9/17/15 1:45 PM
PAGE 6IMPACT OF 3D PRINTNG ON FINGERPRINT SPOOFING
inaccuracy of the second iteration 3D printed mold
is likely due to the increased ridge to valley height
providing a greater number of z-layers over which
the x-y plane tolerance limits were amplifi ed.
The challenge of producing a successful 3D
printed mold, and thus artefacts, includes several
restricting parameters. There is a minimum ridge
height required to 3D print ridge fl ow within the
mold. However, increasing ridge to valley height
without substantially increasing ridge/valley width
exasperates, rather than mitigates these issues.
The second iteration 3D printed mold, although
optimized to overcome one restriction, did
not result in an accurate artefact. A 3D printed
fi ngerprint mold is the negative of the artefact
features, i.e. the features that appear to be ridges
in the mold are valleys in the artefact. As a result,
the following were determined:
• Optimizing the mold design with the current
state of commercial 3D printers has limitations.
• Tolerance in the x-y plane has a signifi cant
impact on ridge shape and minutiae points.
• Currently available commercial 3D printers
cannot, at this time, fabricate a mold
comparable to cooperative fi ngerprint molds.
• Modifi cation of the mold to a fl at presentation
and modifying the printing direction to
diminish x-y tolerance eff ects can potentially
create a biometrically viable mold.
A topographically accurate mold is a complex
structure with a global overall shape and fi ne
structure. The problem can be simplifi ed by using
a fl at representation of a fi ngerprint presentation.
A fl at representation could be better adjusted in
the x, y, and z plans to minimize the impact of
the x-y plane tolerance on mold accuracy. A mold
produced in this manner would not be comparable
to a cooperative fi ngerprint mold, nor contain
enough features to perform rolled presentations
on the sensor. However, this type of mold would
be comparable to those derived from lifted latent
fi ngerprints.
Figure 8: Schematic of fi ngerprint ridge in relation to 3D printing technique specifi cations.
3D Fingerprints 2015 FIN.indd 8 9/17/15 1:45 PM
PAGE 7IMPACT OF 3D PRINTNG ON FINGERPRINT SPOOFING
CONCLUSIONS AND IMPLICATIONS
The viability of fabricating a topographically
accurate mold using 3D printing was investigated
resulting in two iterative 3D printed molds. The
fi rst iteration 3D printed mold included some
areas with accurately reproduced ridge and
valley structures, but otherwise lacked fi ngerprint
features. To address this issue the ridge to valley
height diff erence was increased and a second 3D
printed mold was produced.
The second iteration 3D printed mold contained
signifi cantly more ridges and valleys than the
fi rst; however the features were reproduced less
accurately. Biometric presentations of an artefact
produced using the second iteration 3D printed
mold confi rmed the presence of few accurate
minutiae and a signifi cant number of false
minutiae introduced in the printing process.
The PolyJet™ HD printer chosen for use in this
study has one of the smallest x-y plane tolerances
among available commercial 3D printers;
however accurate replication of ridge and valley
structure at this scale is diffi cult. This study shows
that commercially available 3D printers cannot
print at the resolution necessary to fabricate
fi ngerprint molds comparable to those made
through cooperative methods.
It may be possible to print more accurate 3D
molds than those produced in this study by using:
• Fingerprints with greater valley-to-valley width.
• Fingerprints with less ridge fl ow variation, such
as those exhibiting arches rather than whorls.
However, such cases would not be representative
of the general population and were therefore not
explored in this study. Further evaluation of those
cases may show that in select circumstances 3D
printing can introduce novel vulnerabilities into
biometric fi ngerprint systems.
Conducting biometric fi ngerprint system
vulnerability testing remains a priority despite the
non-viability of this artefact fabrication method.
Advancing technology is a constant reminder that
novel physical attacks are not a question of if, but
a question of when. Consistent and timely testing
allows for deployment of biometric systems that
mitigate these potential risks.
KEY POINTS
• Using 3D printing for mold fabrication
did not result in a mold comparable to
cooperative molds described in the literature.
• Current 3D printing process specifi cations
contributed to the quality and extent of
minutiae replication.
• Commercially available 3D printers cannot
currently print non-fl at fi ngerprint molds.
3D Fingerprints 2015 FIN.indd 9 9/17/15 1:45 PM
PAGE 8IMPACT OF 3D PRINTNG ON FINGERPRINT SPOOFING
References
[1] 3D Printing Industry, “History of 3D Printing: The Free Beginner’s Guide,” 05 2014. [Online]. Available: http://3dprintingindustry.com/3d-printing-basics-free-beginners-guide/history/. [Accessed 28 05 2015].
[2] T. Campbell, C. Williams, O. Ivanova and B. Garrett, “Could 3D Printing Change the World? Technologies, Potential, and Impli cations of Additive Manufacturing,” Atlantic Council, 2011. [Online]. Available: https://info.aiaa.org/SC/ETC/MS%20SubCommittee/Alice%20Chow_3D%2Printing%20Change%20the%20World_April%202012.pdf. [Accessed 30 05 2015].
[3] H.-B. Sun and S. Kawata, “Two-Photon Photopolymerization and 3D Lithographic Microfabrication,” Advances in Polymer Science, vol. 170, pp. 169-273, 2004.[4] Touchless Biometric Systems, “Technology at the Highest Level,” Touchless Biometric Systems AG, 2014. [Online]. Available: http://www.tbs-biometrics.com/tbs/technology/. [Accessed 30 05 2015].[5] Y. Chen, G. Parsiale, E. Diaz-Santana and A. K. Jain, “3D Touchless Fingerprints: Compatibility with Legacy Rolled Images,” 2006 Biometric Symposium: Special Session on Research at the Biometric Consortium Conference IEEE, pp. 1-6, 2006.[6] Y. Wang, D. L. Lau and L. G. Hassebrook, “Fit-sphere Unwrapping and Performance Analysis of 3D Fingerprints,” Applied Optics, vol. 49, no. 4, pp. 592-600, 2010.[7] N. Erdogmus and S. Marcel, “Spoofing 2D Face Recognition Systems with 3D Masks,” International Conference of Biometrics Special Interst Group, 2013.[8] Solid Concepts Inc, A Stratasys Company, “PolyJet,” Solid Concepts, Inc, 2014. [Online]. Available: https://www.solidconcepts .com/technologies/polyjet/. [Accessed 20 05 2015].[9] Stratasys, “PolyJet Technology,” Stratasys, 2015. [Online]. Available: http://www.stratasys.com/3d-printers/technologies/ polyjet-technology. [Accessed 27 05 2015].[10] V. Novotny and M. Kralik , “Epidermal ridge breadth: an indicator of age and sex in paleodermatoglyphics,” Variability, vol. 11, pp. 5-30, 2003.
3D Fingerprints 2015 FIN.indd 10 9/17/15 1:45 PM
Headquartered in McLean, VA with over 700 employees across the US,
Novetta has over two decades of experience solving problems of national
significance through advanced analytics for government and commercial
enterprises worldwide. Novetta’s Cyber Analytics, Entity Analytics and
Multi-INT Analytics capabilities enable customers to find clarity from the
complexity of Big Data at the scale and speed needed to drive enterprise
and mission success. Visit novetta.com for more information.
From Complexity to Clarity.
Copyright © 2015, Novetta, LLC.
7921 Jones Branch Dr, Suite 500
McLean, VA 22102
(571) 282-3000 novetta.com
@novettasol
novetta
3D Fingerprints 2015 FIN.indd 11 9/17/15 1:45 PM