This is an interesting update on the state of iris detection, but I don't think "stolen eyeball" is a realistic threat model that you would have to protect yourself against. Sure, detecting the difference between an authentic iris and a photo is sensible, but if you have an actor willing to acquire another person's eyeball I can't help but feel like a retina scanner won't be the thing that ultimately foils their plans.
How to Teach an Iris Scanner That the Eye It’s Looking at Is Dead
51–54 of 54 posts
Re: How to Teach an Iris Scanner That the Eye It’s Looking at Is Dead
#52This is an interesting update on the state of iris detection, but I don't think "stolen eyeball" is a realistic threat model that you would have to protect yourself against. Sure, detecting the difference between an authentic iris and a photo is sensible, but if you have an actor willing to acquire another person's eyeball I can't help but feel like a retina scanner won't be the thing that ultimately foils their plan…
It doesn't seem that implausible given a military (or terrorist) operation of some kind. If you're raiding an important locked-down government facility, armed to the teeth but unable to enter the facility with explosives, then it seems reasonable to try forcing an employee to stand next to the scanner (which this technology obviously wouldn't prevent), or knocking them out or killing them and putting their face up to the scanner. Though ideally the facility would use MFA (combining the retina scan with a passcode or something).
Re: How to Teach an Iris Scanner That the Eye It’s Looking at Is Dead
#53Earlier quoted context omitted.
Apparently pupils don't adjust terribly quickly: "Briefly, it was found that when light is flashed on a normal eye that is accommodated for the dark, there occurs a latent period of 0.1875 second before the pupil begins to contract. Then there follows a rapid primary contraction for 0.4365 second at the rate of 5.48 mm. per second. This is succeeded by a secondary contraction of 0.3125 second at the slower rate of 1.…
Well, the three times there make about a second for one light-change. So let's say it makes two light-changes, to be sure, for three images (it does say "multiple images", not "two"). That's two seconds, and then say there's another second for processing. Not too unreasonable, especially if (as it says) single-image systems also take about three seconds overall.
That makes perfect sense to me.
Re: How to Teach an Iris Scanner That the Eye It’s Looking at Is Dead
#54> The method we developed images the eye multiple times to see whether it’s actually responding to changes in brightness Hopefully the person does not have Argyll Robertson pupils https://en.wikipedia.org/wiki/Argyll_Robertson_pupil which is seen in late stage syphilis and causes the pupil not to react to the light. Also, another thing is that they should make sure that they train their system with dark eyed people.…
Some people also lack eyes altogether, so these systems need a fallback either way, no?
Fingerprinting with a test that the person is applying pressure through their fingers?