A new startup in Singapore called Touché is developing a device that allows customers to pay via fingerprint. Upon using the system the first time, customers will pay normally via credit card. The credit card will then generate a unique signature to each individual customer. The customer will then scan their fore and middle finger on the device to register their fingerprints. For each subsequent visit to the (currently 150) shops and restaurants that are participating, the user will only need to scan their fingerprints to pay. Both customers and participating shops and restaurants can see the purchase history, expenditures, and offers. Currently, the company has already received $2 million in funding.
Security Concerns
Physical Security:
Similar to Apple Pay and Android Pay, the device uses a method of authentication called tokenization. This allows the device to generate a one-time, unique token that authenticates the purchase each time the user pays with their finger. Furthermore, two fingers are needed to authenticate the payment providing another layer of security if users are concerned.
Data Security:
However, as secure biometrics can be, there is still an issue of data security. Although information is encrypted, if people other than the stores/restaurants and the user were able to retrieve the data, the data privacy of the users will be breached. This means that purchase history and expenditures of users in the system will be compromised.
Sources:
https://www.techinasia.com/touche-profile-funding
http://www.channelnewsasia.com/news/singapore/touch-and-go-singapore-company-launches-biometric-payment/3433924.html
This is definitely an interesting emerging technology! Especially in the light of the huge concern with data security, using a biometrics system doesn’t necessarily make users’ data invulnerable to being stolen. Even though this technology uses a tokenization system proven to work by Apple and other companies, I would be skeptical of how well the actual hardware works and how well businesses would be able to fix the system or device if it were to come up with an error. Great blog post overall!