SmartMetric Inc. says following the recent disclosure of more than a million users biometric data including actual face and fingerprint images that were exposed to hackers it is now time for governments to look at protecting users biometric data from poorly protected centralized data storage systems.Israeli security researchers Noam Rotem and Ran Locar have been running a project that scans ports looking for familiar IP blocks and then uses these blocks to find holes in companies systems that could potentially lead to data breaches.These researchers discovered a security vendor that stores biometric data including managing the physical and cyber access for 5700 organisations in 83 countries including governments banks defense installations corporations and police departments.The researchers found usernames and passwords on this service providers database were mostly not encrypted. They were able to find plain-text passwords of administrators accounts on the now proven vulnerable security and access control databases. Photos of users unencrypted usernames and passwords logs of facility access security levels and clearance and personal details of staff.The access allowed us first of all seeing millions of users who are using this system to access different locations and see in real time even which user enters which facility or which room in each facility. We were able to change data and add new users the researcher Noam Rotem said.This would mean that he could edit an existing users account and add his own fingerprint and then be able to access whatever building that user is authorized to access or he could just add himself as a user with his photo and fingerprints the researchers said.SmartMetric says we view the storage of biometric data in a centralized data system as inherently risky. Any central database is by its very nature far riskier than a decentralized database of data. If for instance a users biometric data is distributed across each users individual devices as opposed to being stored centrally it would require millions of successful hacks to steal these millions of biometric data points. However centralizing all biometric data of millions of users into a central database system would only take one successful database hack for the hackers to reap millions of users biometric information.The SmartMetric biometric smartcard and credit card stores the users fingerprint in each individuals card and explicitly prevents the card users biometric fingerprint information from ever leaving the card. The SmartMetric card itself becomes a closed decentralized database system and the on card data file look up is done by the card itself using a standalone biometric fingerprint scanner built inside the card said today SmartMetrics President CEO Chaya Hendrick.SmartMetric has built a fully functional fingerprint scanner that sits inside the biometric smartcard and credit card. The cards authorized user stores their fingerprint inside the card and the fingerprint scanner using a fingerprint sensor on the cards surface uses the pre-stored fingerprint to match against the card users fingerprint when they touch the cards sensor on the cards surface.SmartMetric holds issued patents on its technology. Years of research and development have now culminated in a world class leading product in the biometric IOT space.SmartMetric is a USA-based company with sales and marketing partnerships in Latin America Europe and the United States. Engineering of the biometric card electronics is done in-house and is the owned intellectual property of the company. SmartMetric has various patents pending and has five significant issued patents.
🔍 Key Information
📄
Tender Reference No.
449213510
📅
Publication Date
27 Nov 2019
🌐
Sector
Information Technology (IT)
📝
Notice Type
News
📍
Location
United states
📁
Documents & Downloads
No documents found
🏷️ CPV
No CPV found
Need help with this bid?
Our bid experts can help you find, evaluate & win more tenders.