Home » News » Card Reader Face Recognition Vulnerabilities Exposed: Impersonation Possible

Card Reader Face Recognition Vulnerabilities Exposed: Impersonation Possible

“With this, it is possible to impersonate.” On the 2nd, the director of a medical clinic in Nagasaki City, 67, tried to use a card reader to authenticate the face of a female staff member who wore a photo of her face like a mask, using her minor health insurance card. By the way, I was easily authenticated and proceeded to the next procedure. The director recorded the whole story on video to sound the alarm. (Hiromi Nagakubo)

◆ I thought it was a surprise and tried it…

This paper obtained a video from the director. In the video, a female staff member held a nearly full-size photocopy of the director’s face over her face, placed the director’s minor health insurance card on the reader, and brought her face closer to the screen for facial recognition. It is contained.

According to the hospital’s director, there were almost no problems with the card reader introduced in the online eligibility confirmation system, “because there are few patients who use minor health insurance cards.” However, he questioned the accuracy of face recognition, saying, “Perhaps everyone (including spoofs) may have authenticated.”

The director said, “I thought it would be impossible, but I tried it. Originally, only local patients came, so I had an insurance card, and I didn’t feel the need for face recognition on the card reader. No,” he said.

The reader is a model called “Caora” manufactured by computer-related manufacturer “PFU” (headquartered in Kahoku City, Ishikawa Prefecture) and sold by Fujitsu Japan. A spokesperson for Fujitsu Japan told the newspaper, “We don’t know the details, so we would like you to refrain from commenting.”

In the “disclaimer” written in the operation manual of this reader, regarding the “anti-spoofing function”, “the possibility of spoofing using a photo, driver’s license, or face image displayed on a smartphone by artificial intelligence (AI). It is an ‘AI forgery detection’ that does not perform face authentication if it is judged to be high.” On top of that, it says, “Since it is a simple function, it may not be possible to completely prevent spoofing using photos, driver’s licenses, smartphones, etc.”

The government cite prevention of “unauthorized use” as the reason for switching from the current health insurance card to the minor health insurance card.

The Ministry of Health, Labor and Welfare responded in writing to a hearing held by the Constitutional Democratic Party of Japan on the 1st, saying, “There have been at least 50 cases in the last five years (2017-2022) of the National Health Insurance system of municipalities regarding the unauthorized use of health insurance cards.” However, House of Councilors member Hideya Sugio of the same party commented, “Even if we ask for the total number of fraudulent uses other than that, we won’t give figures. It’s very questionable whether minor health insurance cards can really prevent spoofing.” .

 card reader with face recognitionSince April this year, medical institutions have been obliged, in principle, to install an “online eligibility confirmation” that reads the health insurance card information on the My Number card. The government emphasizes the convenience of online eligibility confirmation, saying that it will be possible to check medical information at medical institutions and pharmacies, drug information, medical expenses paid to medical institutions, etc. on the dedicated site “Mynaportal”. A survey conducted by the National Federation of Health Insurance Physicians Associations (Hodanren) in June this year revealed that about 50% of the medical institutions that have introduced the system have experienced problems.


2023-08-02 11:01:25
#Minor #health #insurance #card #person #wore #face #photo #impersonate #doctor #concernexperimental #video #Tokyo #Shimbun #TOKYO #Web

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.