Could biometrics provide the ultimate weapon in
the fight against internet fraud? German technology and engineering
giant Siemens believes it can and is forging ahead with a
fingerprint-based solution now undergoing trials in Germany and
Switzerland.
The solution, which does not require any
additional software or hardware and can be used on any computer, is
based on an internet identification device the size of a plastic
payment card.
The device is equipped with a fingerprint
scanner and six optical sensors. To perform a transaction the user
identifies himself or herself to a bank using a fingerprint. The
bank’s website then sends a flicker code, which the sensors of the
device register and decrypt. In the process, the device’s monitor
displays six rapidly flashing fields that alternate between black
and white.
The flicker code contains the details of the
transaction submitted to the bank and the associated transaction
number (TAN). Using an integrated cryptographic key, the device
decrypts the code and displays the deciphered information on its
small screen.
The user checks to make sure the transaction
data is complete and finally confirms the transfer by entering the
TAN currently displayed. To initiate the security solution a
customer scans several fingers onto the device. The process also
involves selecting what Siemens terms an emergency finger for use
when a customer is forced to transfer funds under duress.
The emergency fingerprint can, for example, set
off an alarm at the bank if the finger is scanned. The transaction
is conducted on the computer monitor to fool the offender, but the
bank does not actually complete the request.
Siemens noted that online banking is just one
of many possible applications. For users who enjoy activities
ranging from online auctions to downloading music, the device has
128 keys and in theory can be used for a corresponding number of
different online service providers.
To develop the authentication solution Siemens
IT Solutions and Services unit is working in partnership with
AXSionics, a Swiss biometric security company.
AXSionics was founded in 2003 following its
spin-off from a campus of the Berne University of Applied Science
in Biel, Switzerland.
In 2007, AXSionics received the Swiss
Technology Award for its development of what it terms the biometric
internet passport from the Swiss Innovation Forum, a multi-industry
body focused on promoting innovation in Switzerland.