Technology

Biometric Identity Theft

Posted on Updated on

Recently I have been researching the potential of fraud and identity theft using fingerprints from photos posted on social media. Last week Amazon released its “Amazon One” Palm Scanner as a means to pay for purchases when shopping. That announcement made me wonder, what are the potential implications for fraud and identity theft using biometric data taken from images?

Man's forearm and hand, index finger extended to point to one of a series of "digital keys"
Could Photos posted on Social Media sites become the Key to Digital Identify Theft?

There are a surprising number of ways to accurately identify someone from a photo or video. Moreover, there is technology to copy fingerprints from social media photos taken up to three meters away. New technology has been proven effective at using 3D printing technology to create “fake fingerprints” that will bypass many fingerprint scanners.

Technology continues to improve at a rapid pace, which often means, “Where there is the will there’s a way.”

Since fingerprints can be copied from photos taken up to three meters away does that mean a palm print could potentially be copied from a photo taken 5-10 meters away? That question led to an interesting but unscientific experiment where I took pictures of my own hand, enlarged them, and then measured the distance between the ridges and furrows of both my fingers and my palm, and then compared the results of the two. Spoiler – probably not.

There are several areas where that distance was similar for both my fingers and palm. But, there were also areas on my palm where the average distance between “landmarks” was 3-5+ times greater. It turns out that for identification purposes a palm image is often segment into 3-4 distinct regions, likely due to this type of variation. This link was helpful to understand the process.

This research led to an idea for a chip-based embedded filter for smart devices and laptops. It would obfuscate key biometric information when extracting the data for display, without affecting the integrity of the original stored image. This functionality would automatically provide an additional layer of privacy and data protection. It would require optimized object detection capabilities (possibly R-CNN) that were highly efficient, and run on a capable but low energy processor like the Arm Cortex-M. Retraining and upgrades would be accomplished with firmware updates.

Edit 2020-10-13: This article on “Tiny ML” from Medium.com is the perfect tie-in to the idea described above.

While Amazon’s technology is much newer and presumably at least partially based on their 2019 Patent Application (which does look impressive), it makes you wonder how susceptible these devices might be to fraud given reports of the scans occurring “almost instantaneously.” Speed is one aspect of successful large-scale commercial adoption but the accuracy and integrity of the system are far more important from my perspective.

Time will tell how robust and foolproof Amazon’s new technology really is. Given their reach, this could occur sooner than later. Ultimately, multiple forms of biometric scans (such as a full handprint with shape, palm, and fingerprints, or a retina scan 2-3 minutes prior to the palm scan to maintain performance) may be required for enhanced security, especially with mobile devices.

Additional Resources:

The Coming Changes to Manufacturing

Posted on Updated on

Recently, I was speaking with a person who is part of a team analyzing ways to, “mitigate the risk of exclusive manufacturing in China” while not fully divesting their business interests in a growing and potentially lucrative market. This bifurcation exercise got me thinking about how many other companies are evaluating their supply chain relationships, inventory management, and the predictability of their cost of goods sold.

In the mid-1990s I had done a lot of work with the MK manufacturing software that ran on the Ingres database. Some of the issues were performance-related and fixed by database tuning, some fixed by using average costs instead of a full Bill of Materials (BOM) explosion using dozens of screws in a window, but some were more interesting and also more business-focused.

After NAFTA became law one manufacturer built a facility in Mexico and started having a few basic but important parts manufactured there. When I arrived as a Consultant the main problem they faced was a reject rate of roughly 20% and additional related QA costs. My suggestion was to treat this part (say a single piece of steel like the rotor from a disk brake system) as a component and build-in the cost of both the scrap and the QA. They could then benchmark the costs against other suppliers in an apples-to-apples comparison to determine if they were really saving money. That approach ended up working well for them.

While that approach helped manage costs it did not address the timeliness of orders or lead time required – important aspects of Just-in-Time (JIT) manufacturing. Additionally, it should be possible to estimate shipping costs by taking into account changes in petroleum costs or anticipated changes in demand or capacity.

There are systems that are out there that claim to estimate the cost and availability of commodities based on a variety of global factors and leading indicators. It is tricky, to say the least, and can’t anticipate an event like a pandemic. But, companies that are able to manage their inventory and production risk the best will likely be the ones that succeed in the long run. They will become the most reliable suppliers and have increased profits to invest in the further growth and improvement of their businesses.

The next 2-3 years will be very interesting times due to advances in technology and geopolitical changes. Those companies that embrace change and focus on real transformation will likely emerge as the new leaders in their segments by 2025.

New Perspectives on Business Ecosystems

Posted on Updated on

One of the many changes resulting from the COVID-19 pandemic has been a sea change in thoughts and goals around Supply Chain Management (SCM). Existing SCM systems were up-ended in mere months as it has become challenging to procure raw materials to components, manufacturing has shifted to meet new unanticipated needs, and logistics challenges have arisen out of health-related staffing issues, safe working distances, and limited shipping options and availability. In short, things are a mess!

Foundational business changes will require modern approaches to Change Management. Change is not easy – especially at scale, so having ongoing support from the top down and providing incentives to motivate the right behaviors, actions, and outcomes will especially critical to the success of those initiatives. And remember, “What gets measured gets managed,” so focusing on the aspects of business and change that really matter will become a greater focus.

Business Intelligence systems will be especially important for Descriptive Analysis. Machine Learning will likely begin to play a larger role as organizations seek a more comprehensive understanding of patterns and work towards accurate Predictive Analysis. And of course, Artificial Intelligence / Deep Learning / Neural Networks use should accelerate as the need for Prescriptive Analysis grows. Technology will provide many of the insights needed for business leaders to make the best decisions in the shortest amount of time that is both possible and prudent.

This is also the right time to consider upgrading to a modern business ecosystem that is collaborative, agile, and has the ability to quickly and cost-effectively expand and adapt to whatever comes next. Click on this link to see more of the benefits of this type of model.

Man's forearm and hand, index finger extended to point to one of a series of "digital keys"

Whether you like it or not, change is coming. So, why not take a proactive posture to help ensure that this change is good and meets the objectives your company or organization needs.

Changes like this are all-encompassing so it is helpful to begin with the mindset of, “Win together, Lose together.” In general, it helps to have all areas of an organization moving in lockstep towards a common goal but at a critical juncture like this that is no longer an option.

Blockchain, Data Governance, and Smart Contracts in a Post-COVID-19 World

Posted on Updated on

The last few months have been very disruptive to nearly everyone across the globe. There are business challenges galore; such has managing large remote workforces – many of whom are new to working remotely, and managing risk while attempting to conduct “business as usual.” Unfortunately for most businesses, their systems, processes, and internal controls were not designed for this “new normal.”

While there have been many predictions around Blockchain for the past few years it is still not widely adopted. We are beginning to see an uptick in adoption with Supply Chain Management Systems for reasons that include traceability of items – especially food and drugs. But large-scale adoption has been elusive to date.

Image of globe with network of connected dots in the space above it.

My personal belief is that we will soon begin to see large shifts in mindset, investments, and effort towards modern digital technology driven by Data Governance and Risk Management. I also believe that this will lead to these technologies becoming easier to use via new platforms and integration tools, and that will lead to faster adoption by SMBs and other non-Enterprise organizations, and that will lead to the greater need for DevOps, Monitoring, and Automation solutions as a way to maintain control of a more agile environment.

Here are a few predictions:

  1. New wearable technology supporting Medical IoT will be developed to help provide an early warning system for disease and future pandemics. That will fuel a number of innovations in various industries including Biotech and Pharma.
    • Blockchain can provide the necessary data privacy, data ownership, and data provenance to ensure the veracity of that data.
    • New legislation will be created to protect medical providers and other users of that data from being liable for missing information or trends that could have saved lives or avoided some other negative outcome.
    • In the meantime, Hospitals, Insurance Providers, and others will do everything possible to mitigate the risk of using the Medical IoT data, which could include Smart Contracts as a way to ensure compliance (which assumes that there is a benefit being provided to the data providers).
    • Platforms may be created to offer individuals control over their own data, how it is used and by whom, ownership of that data, and payment for the use of that data. This is something that I wrote about in 2013.
  2. Data Governance will be taken more seriously by every business. Today companies talk about Data Privacy, Data Security, or Data Consistency, but few have a strategic end-to-end systematic approach to managing and protecting their data and their company.
    • Comprehensive Data Governance will become both a driving and gating force as organizations modernize and grow. Even before the pandemic there were growing needs due to new data privacy laws and concerns around areas such as the data used for Machine Learning.
    • In a business environment where more systems are distributed there is an increased risk of data breaches and Cybercrime. That will need to be addressed as a foundational component of any new system or platform.
    • One or two Data Integration Companies will emerge as undisputed industry leaders due to their capabilities around MDM, Data Provenance & Traceability, and Data Access (an area typically managed by application systems).
    • New standardized APIs akin to HL7 FHIR will be created to support a variety of industries as well as interoperability between systems and industries. Frictionless integration of key systems become even more important than it is today.
  3. Anything that can be maintained and managed in a secure and flexible distributed digital environment will be implemented as a way to allow companies to quickly pivot and adapt to new challenges and opportunities on a global scale.
    • Smart Contracts and Digital Currency Payment Processing Systems will likely be core components of those systems.
    • This will also foster the growth of next generation Business Ecosystems and collaborations that will be more dynamic in nature.
    • Ongoing compliance monitoring, internal and external, will likely become a priority (“trust but verify”).

All in all this is exciting from a business and technology perspective. It will require most companies to review and adjust their strategies and tactics to embrace these concepts and adapt to the coming New Normal.

The steps we take today will shape what we see and do in the coming decade so it is important to quickly get this right, knowing that whatever is implemented today will evolve and improve over time.

Could this Pandemic Create New Business Opportunities?

Posted on Updated on

Originally posted on LinkedIn.com/in/chipn

For most businesses now is a time of caution and uncertainty. Mitigation and emergency planning is likely underway. The CDC has provided solid guidance and new information is forthcoming daily. Communication Plans are being rolled-out and revised as needed. Travel and meetings are being curtailed. Disruption may become the new normal for the next few months.

Road sign that reads, "Uncertainty Just Ahead" with a background of storm clouds.

Alexander Fleming, the Nobel Prize winner who invented Penicillin, is quoted as saying:

“The unprepared mind cannot see the outstretched hand of opportunity.”

More people will be working from home, face to face meetings will be limited, and large gatherings will be avoided as well as travel to those meetings or gatherings. Working from home can be challenging for people who are not accustomed to it so helping them make the transition may be very important to your financial bottom line.

Collaboration tools such as Slack, Basecamp, and Asana can help maintain productivity and foster necessary interaction. Some tools include video conferencing, but even so, having tools like Zoom or Webex can help both internally and externally. Seeing the person you are speaking with helps increase engagement and lead to more effective communication by spotting nuances such as facial expressions that could otherwise be missed.

Tools that are secure, are easy to implement (cloud-based solutions have an advantage here), and are easy to learn and use can be a cost-effective way to keep your business on-track. An additional benefit could be the creation of an effective distributed workforce.

But wait, there is more!

There may be important projects that you could pull in and start now. That is another means of keeping your teams engaged and focused. This could also be an opportunity to enhance skills with online training or to conduct research on new technologies or business models.

This could also be a great time to buy and sell products and services. Business demands could temporarily decrease in many market segments.

  • Sales organizations could leverage that as an opportunity to provide appealing offers to your customers and prospects.
  • Buyers could leverage their ability to quickly purchase products and services to secure better deals during this lull in business.

Reasonable concessions are mutually beneficial and could be a boon for both parties.

Negative events like a pandemic are not ideal and should not be taken lightly, but they can provide opportunities to advance your business and be positioned for even greater success once this situation is under control. It is like that wise old saying, “When life gives you lemons, make lemonade.”