Finger scanning gaining in popularity, raising security concerns

ABC7 I-Team Investigation

Jason Knowles Image
Friday, February 6, 2015
Finger scans raise concerns
Finger scanning is gaining in popularity, but experts are concerned about security risks.

CHICAGO (WLS) -- Biometric finger scanning is used by many to unlock their phones, and the technology is taking off at businesses. As a key piece of someone's identity, security experts say consumers shouldn't just give their fingerprints to anyone.

LA Tan recently expanded its biometric finger scanning program. Now, a majority of the tanning salons located in Chicago will ask you for your fingerprint when you arrive for a tan.

"I am a little leery of giving out my fingerprint because it is an identity piece," Jennifer Morehead said. Morehead said she refused to give up her fingerprint at two different northwest Indiana locations, and the employees wouldn't let her use her tanning package.

"I am supposed to be able to use those at any site and those are the two closest to my house," she said.

An LA Tan corporate spokesperson declined an on-camera interview, but said Morehead must have been misinformed. She and other customers are allowed to opt out of the finger scan, the spokesperson said.

The scan is to prevent family members and friends from sharing packages, according to LA Tan.

"And then I asked if they have a policy or procedure for safely securing the data if they took it, or if I decide not to come any longer. How they are going to dispose of it? Morehead said.

LA Tan said "no image of a print is stored" or can be replicated. The scan also creates an encrypted number code form the print, LA Tan said.

Before putting a finger on a scanner anywhere, the data security team at Governors State University said consumers should ask critical questions.

"How is my personal information being stored? And where is it being stored. Is the company storing it? Is it being stored off site and do they plan on using it in the future," David Green, professor management information systems at GSU, said.

If an image is saved and it gets in the wrong hands, Assistant Profesor William Kresse warns it could lead to real problems.

"I could take that image and print it out on the printer using an overhead laminate and now I have a clear print of your print, taken from the computer system and I would then cut out that thumb print, tape it to my own thumb and run it across the reader on your phone and boom I break into your phone," Kresse said.

A similar breach can be accomplished by using a finger print kit to lift prints.

In an extreme case, the print could be used to frame someone for a crime.

"As more and more biometric technologies, iris scanners, retina scanners, fingerprint scanners are used in consumer based technologies, it will be a bigger concern," Green said.

LA Tan stands behind its finger scan technology, and said it's faster for customers and more accurate