Like everyone, try CEIN Wukong refers to the vein recognition mouse, which focuses more on its file protection and fast login functions than on its simple use as a mouse.

However, Wukong is said to have adopted the unique finger vein characteristics of the human body, but it is not safe at all and extremely dangerous.

The first time I tried, I had the same joy and excitement as everyone, and I recognized quickly, but this was just an illusion. I excitedly called two colleagues of the company to register their finger vein information. One of the colleagues G No matter what posture you take, it is difficult to pass. Finally, after he moved his finger by a large margin, he was lucky to pass. I couldn't help wondering, holding two unregistered colleagues Z , Colleagues X To unlock, it succeeded. We boldly draw a conclusion that the threshold of finger vein recognition is very low, about one finger can pass through.

If you don't believe it, it is recommended to register more finger veins.

Next, with the disappointment of domestic information security products and the attitude of being responsible for an evaluation, I started from the beginning.

First, give the box a close-up.

Wukong's packing box has a good texture. It is standard, and it matches with a pile of foreign magazines nearby.

When opening the box, pull it up as a whole. It has a good sense of damping. It looks like this when opened - mouse at the tip of the iceberg, user manual, thank you card.

Pull out the hard sponge to reveal the true face of the mouse.

USB The thread is stuck with coarse cloth tape. From the following two pictures, we can see four infrared lamps, finger vein collection frame, and golden USB Interface.

The line is long enough. This picture shows the blue light on the back of the mouse and the company logo.

At first, I was worried that the bulge on the left side would block my hand, but it had no effect in actual use.

As a piece of hardware, the Wukong mouse is good in terms of appearance, material, design and feel.

As a privacy protection device, let's forget it.

It is written in the product manual that the software can be downloaded from the official website of Zhiyi Biology to realize user functions.

The installation process will encounter system and three hundred and sixty Only select "Allow this operation (do not prompt again)".

Register the user name and password as shown in the figure. This backup code can be unlocked when the vein is not recognized.

Next, start to register the vein. At first, I used to regard the identification frame as a fingerprint, colleague Z As a reminder, the infrared radiation is on the finger vein, so just keep the normal use posture. The recognition speed is super fast, and I repeat "Close the software - Open software - Vein recognition - Unlock successfully - Close the software ", while admiring.

colleague G Hearing my praise, he walked over and said, "I'll experience it too." He sat down and clicked the following figure "Start collecting finger veins". After collecting, he exited the software. When he reopened it, he could not unlock it.

At the beginning, we speculated that finger vein recognition might be related to age. For young and tender hands, infrared light is easier to irradiate, while for middle-aged and old people, skin is rough, and infrared light is not easy to penetrate.

In fact, the finger vein is very sensitive. Gently pressing it will change the image of vein vessels, leading to recognition failure. If a person's gesture is stiff when registering, he must maintain the same rigidity every time he recognizes in the future to ensure passing.

No wonder we need a backup password. The finger vein is so unstable, like my colleague G In this way, people can be identified repeatedly. I'm afraid that the backup code is more effective than the finger vein.

However, if a biometric is unstable, it should not be used to protect information security. The really high-end biometrics should not require a password as a backup at all.

Continue to introduce the "File Protection" and "Quick Login" functions.

Click "File Protection" at the bottom left of the software, and the box in the following figure will appear. There are two protection methods: locking and hiding.

The following figure shows the effect before and after hiding the file "Flower Thousands of Bones". Please compare the top left of the screen.

If it is locked, the following prompt will appear when you open the document.

Click the“ + ”The box in the following figure will appear.

Select a website from the list, fill in the account and password, select the website icon through the software, and it will help you enter. However, websites that need a verification code still need to manually enter the verification code.

In addition, this function has some chicken ribs.

1、 Only thirty-seven Sites, QQ , Weibo, bank and other common logins are unavailable. You cannot add your own website.

2、 Only supported IE browser. Now many websites, such as one hundred and thirty-five WeChat editor, IE It is no longer supported.

Therefore, it is recommended to support all browsers, not limited to websites, but where passwords are required, biometrics can be used.

As for Wukong mouse, the biggest problem is the vein recognition technology.

If I just refuse to accept the truth, at least my privacy and files are safely stored in the computer, and my account password is also safe, despite my anxiety.

If there is a misunderstanding, it is the most terrible. Others can open my software, get my hidden files, and know my password without my knowledge.

What is terrible is not "insecurity", but "self righteous security".

Fingerprints can be copied by non living body, fingerprint cover and high-definition photos because they will leave traces. When I saw the product description of Wukong Finger Vein Recognition Mouse, when I was only experiencing this mouse alone, I also thought it was "self righteous and safe".

At a colleague X , Colleagues Z After the situation that Wukong failed to register but passed the recognition, I still had a little confidence in Wukong, thinking that it was the confusion caused by too many registered finger information.

So I clicked "Clear Data". Only registered colleagues Y His finger vein failed to pass. I did not register, but it was unlocked successfully. It can be seen that the finger vein recognition technology adopted by this mouse does have problems.

In this way, technical thresholds and matching scores are involved. Let's give you a general introduction.

All biometric processes compare the registration template (my finger vein information) and the recognition template (finger vein information recognized by the device) to get a matching score (similarity). If the matching score is high, it is considered that the recognized finger and the registered finger are the same person, and the recognition is passed; If the matching score is low, it is considered that the person is not the same, and the recognition fails.

In order to facilitate readers' understanding, the biological characteristics here take the finger vein as an example. The data in the figure is only for explanation and easy understanding. The value and proportion are slightly out of balance, please forgive me.

You should know that the digital vein images of any two people cannot be exactly the same, and the digital vein images of the same person during recognition and registration cannot be exactly the same.

As shown in the figure below, the recognition template is to compare the finger vein information of strangers and registrants, A Point represents two finger veins 10% Similar possibilities are 90% (Most people's finger veins are very different.), B Dots represent two human biometrics 30% Similar possibilities are 10% (The higher the similarity of two people's biological characteristics, the lower the possibility).

The registration template is to compare the digital vein image of the registrant when he/she recognizes with the digital vein image when registering, C Dots represent finger vein information during recognition and registration 80% Similar possibilities are 90% 。

The diversity of biometrics determines whether it can be used for biometrics or whether it is accurate enough. Assume matching score from zero reach one hundred The characteristics of lack of diversity are shown in the figure below one As shown in the figure below two As shown in.

However, the biological characteristics that lack diversity and accuracy are highly similar to each other. Even if others do not register the feature information, they have the opportunity to "get through".

If the matching score happens to be at the intersection of two bands, it becomes very difficult to set the threshold, which may be false or false.

As mentioned earlier, the finger vein is very sensitive to pressing force, which can easily lead to distortion of vein image and recognition failure. However, the user cannot pass all the time, and can only maintain the user experience by lowering the threshold.

Therefore, the phenomenon of "it can't recognize me, but let others pass" will appear.

As shown in the figure below, the diversity and accuracy of biological features, such as iris, are very obvious between people, and the iris information of twins is also completely different. In other words, the iris similarity of any two people is almost zero. Therefore, it is only necessary to set the threshold in the blank of the two bands.

Of course, any kind of biometric recognition cannot be completely without difference. Even the most accurate iris recognition only reduces the possibility of similarity between the two to 0.0001% That is, the band intersection between the recognition template and the registration template is very small.

At present, iris recognition with the highest accuracy and no contact is the best biometric recognition. If this technology can be used for login, lock screen, password management and file protection, domestic information security products can also be regarded as reassuring.