A new smartphone application developed by researchers at ETH Zurich aims to tackle the issue of document forgery by providing a convenient and reliable method to verify the authenticity of various items, including documents extracted from the debt enforcement register of the City of Zurich.
Smartphone App Aims to Unmask Forged Documents
Document forgery poses a significant challenge due to the potential consequences of such fraudulent activities. To combat this, researchers from the Information Security group, led by David Basin, have devised a smartphone app designed to disrupt forgers' efforts.
When an organization issues a document, it includes a QR code linked to an encrypted version of the original document stored on a server.
Additionally, a printed copy of the document is provided to the recipient. To verify the authenticity of the printed document, the recipient uses the organization's verification app to scan the QR code and records the document using the app's camera until it's authenticated.
This verification process typically takes just over a second. The app analyzes the sequence of images captured during filming, comparing them to the original document and highlighting any discrepancies in real-time on the screen. However, the filmed document is not stored on the smartphone for privacy reasons.
One of the main challenges the researchers faced was ensuring that only relevant differences were flagged during the verification process. Furthermore, the app can verify documents when the recipient films a scanned version on a computer screen.
Martín Ochoa, the lead author of the research article detailing this technology, emphasized the complementary relationship between the digital and physical worlds. He founded ETH spin-off thenti with David Basin to capitalize on this technology.
Read Also: Google Brings AI-Enhanced Security Tools in SecOps for Enhanced Cyber Threat Management
Thenti's Business Model
In 2015 alone, reports indicated that a "degree mill" sold over 200,000 forged academic certificates, amassing approximately USD 50 million. Institutions like the City of Zurich face similar challenges, particularly concerning the authenticity of documents required for essential transactions.
The debt enforcement register maintained by the City of Zurich provides critical information about individuals' financial histories, impacting their eligibility for various services.
Unfortunately, document forgery remains a prevalent issue, according to the research team, leading to considerable costs and inefficiencies for regulatory authorities and service providers.
Thenti's business model incorporates a subscription-based approach. It allows free initial usage for a specified number of verifications. After this, users must subscribe to continue using the app's services.
Looking ahead, the development team at thenti is exploring additional applications for the app, including the ability to verify three-dimensional objects
"When we heard about the technology, we knew immediately that this was something of potential interest for us," Alejandra Itel, Organizational and IT Project Manager at Zurich City Council, said in an official statement.
"On the one hand, because it could solve an expensive problem for us, and, on the other, because it would enable us to contribute to strengthening trust and security."
The team's findings were presented at the Annual Computer Security Applications Conference.
Related Article: Twitch Moves Beyond Gaming as It Steps Into News Coverage
