Alesis_Novik

In my opinion, this is a great move towards making mobile banking more usable. Compared to carrying around a hard token or having a 20 random character password, biometrics offer good user experience without compromising the security too much. There are plenty intelligent ways of performing liveliness detection, the most obvious being a challenge-response scenario.

That being said, no individual biometric is good enough to provide a good and consistent experience on it's own. Every one has situations and environments it fails in (noisy room, dark environment, etc.). That's why I believe only a combination of different modalities (facial, voice, etc.), can provide a robust and consistent solution.

For full disclosure - I'm the CTO of AimBrain and we're hiring: https://aimbrain.com/joinus

So do you yourself currently use Wikis for knowledge capture or do you do it in a different way?

I know Google Hangouts tried doing some SMS integration, though I've read it was pulled in Nexus 6.

I've tried looking for a better solution and couldn't find one. Out of curiosity - what is your day job?

Hi HackerNews,

I'm a co-founder of Idenux and we are excited to show you our ECG (electrocardiogram - your heart signal) based biometric and healthcare technology.

Idenux ECG is a software and hardware devkit on which you can build security and healthcare applications. We are now taking sign-ups for the first batch of devkits and are looking forward to any comments, questions or ideas you might have.

Thanks!

Thanks for the reply!

1) Research suggests that because of the way your heart is formed, the ECG signal is as unique as your fingerprint, the only question is the ability to extract the relevant information, which we achieve using the latest research.

2) Structural changes to the heart (e.g. heart attack) would change your ECG. For this we would provide 1-time login codes so the person can update the signature. For non-structural changes there are methods for signature normalization (e.g. http://jrnlappliedresearch.com/articles/Vol6Iss4/hosmane.pdf)

3) Most of the fingerprint scanners require a repeated swiping motion, while our method is passive. Good fingerprint scanners are also more expensive that our projected price. Finally, it is a lot harder to spoof an ECG while you leave your fingerprints everywhere you go.

4) Thanks for the suggestion! We will definitely look into that.

5) That is our target initial price. With scale, we will be able to do it even cheaper.

Thanks for the reply!

1) A solution to this are token or password store based methods, that you would never disclose your signature to the service provider.

2) The location for the electrode is fine, but until we can get the laptop manufacturers to integrate the rest of the board, it would have to be external.

3) That is actually one of the applications/selling points we are thinking about. The initial run would be dev-kits, which avoids legislative issues.

4) Windows and Linux will definitely be supported. Unfortunately Apple/Mac OS/iOS are too closed source for a straightforward integration. That being said, I am sure we will find a way.

5) While the initial launch might not hit that price, with scale it is definitely achievable.

6) While we are not sure about the effects of the specific medication you are taking, research suggests that ECGs are invariant to non-structural changes.