{"id":21950,"date":"2012-12-15T20:17:03","date_gmt":"2012-12-16T01:17:03","guid":{"rendered":"http:\/\/rbach.net\/blog\/index.php\/"},"modified":"2021-08-14T19:57:34","modified_gmt":"2021-08-14T23:57:34","slug":"scan-your-sclera-for-security","status":"publish","type":"post","link":"https:\/\/rbach.net\/index.php\/scan-your-sclera-for-security\/","title":{"rendered":"Scan Your Sclera for Security"},"content":{"rendered":"

\"ScanTyping a password<\/strong> into your smartphone<\/span> might be a reasonable way to access the sensitive information it holds, but a startup<\/strong> called EyeVerify<\/strong> thinks it would be easier\u2014and more secure\u2014to just look into the smartphones\u2019\u00a0camera lens and move your eyes to the s<\/strong>ide<\/strong> scan your sclera for security.<\/p>\n

\"EyeVerify<\/a>MIT Technology Review<\/a>\u00a0<\/i>says<\/a> that Kansas City, KS<\/a>-based EyeVerify<\/a> software claims that it can identify you by your \u201ceye-prints<\/strong>,\u201d the pattern of veins in the whites of your eyes<\/strong>. The firm claims the method is as accurate as a fingerprint or iris scan<\/a>, without requiring any special hardware.<\/p>\n

The company plans to roll out its security software next year. CEO and founder Toby Rush<\/a> envisions a range of uses for it, including authenticating access<\/strong> to online medical records or bank accounts via smartphones. Mr. Rush told TR<\/em> that phone manufacturers<\/strong> are interested in embedding the software into handsets so that many applications can use it for authenticating people, though he declined to name any prospective partners. The security software allows people to bypass the security on their mobile devices just by looking at it.<\/p>\n

The article explains that the technology behind EyeVerify comes from Reza Derakhshani<\/a>, associate professor of computer science and electrical engineering at the University of Missouri, Kansas City<\/a>. Dr. Derakhshani, the company\u2019s chief scientist, was a co-recipient of a patent for the eye-vein biometrics behind EyeVerify in 2008.<\/p>\n

\"Retina<\/a>To the users, EyeVerify seems pretty simple<\/strong> (though somewhat awkward in its prototype stage according to the article). To access data on a smartphone that\u2019s locked with EyeVerify, the blog says you would look to the right or the left, enabling EyeVerify to capture eyeprints from each of your eyes with the camera on the back of the smartphone.<\/strong> (Eventually, EyeVerify expects to take advantage of a smartphone\u2019s front-facing camera, but for now, the resolution is not high enough on most of these cameras, Rush says.) EyeVerify\u2019s software processes the images maps the veins in your eye and matches that against an eye-print stored on the phone.<\/p>\n

EyeVerify CEO Rush says the software can tell the difference between a real person and an image of a person. It randomly challenges the smartphone\u2019s camera to adjust settings such as focus, exposure, and white balance and checks whether it receives an appropriate response from the object it\u2019s focused on.<\/p>\n

\"Biometrics\"<\/p>\n

The look of the veins in your eyes changes over time, and you might burst a blood vessel one day the article speculates. But Mr. Rush says long-term changes would be slow enough that EyeVerify could \u201cage\u201d its template to adjust<\/strong>. And the software only needs one proper eye-print to authenticate you, so unless you bloody up both eyes, you should be able to use EyeVerify after a bar fight.<\/p>\n

EyeVerify still needs to do more to prove that. Mr. Rush says that in tests of 96 people, the eye-print<\/i> system was 99.97 percent accurate<\/strong>. The company is working with Purdue University<\/a> researchers to judge the accuracy of its software on 250 subjects\u2014or another 500 eyes.<\/p>\n

Mr. Rush\u2019s favorite application is for voters on Election Day. \u201cBeing able to vote from the convenience of my house, I can already send in a mail-in ballot, why not verify biometrically<\/a> here and simply vote?\u201d he told<\/a> Fox News.<\/p>\n

rb-<\/em><\/strong><\/p>\n

The end-user will be the fundamental roadblock to any eye-based biometrics.\u00a0\u00a0 Traditionally, anything related to eye recognition has received strong resistance, because it is just human nature to be squeamish about having our eyes scanned.<\/em><\/p>\n

I covered the challenges of biometrics here<\/a>, as long as this technology is limited to smartphones, some but not all biometrics issues remain:<\/em><\/p>\n

    \n
  1. What is the real-world sensitivity\/specificity trade-off i.e. quantified False Positive and False Negative Error Rates?
    \n<\/em><\/li>\n
  2. Revocability. What happens if the mobile device is lost? What is the strategy to cancel and reissue a pair of eyes?<\/em><\/li>\n<\/ol>\n

    Despite the concerns scanning your sclera for security is coming to an iPhone near you.<\/em><\/p>\n