Android Future Tech Security

Are Retina/Iris Scanners The Next Level Of Mobile Security?

Skye Hudson 18-08-2014

Rumors are swirling that the Samsung Galaxy Note 4 could have a retina or iris scanner built-in, allowing the user to unlock the phone just by looking at it. This sounds like something out of a science fiction movie, but as we’ve learned with the fingerprint scanner implementation in the iPhone 5S and Galaxy S5, these kinds of personalized locking mechanisms aren’t always perfect Touch ID Woes: Troubleshooting The iPhone 5S Fingerprint Scanner There's no doubting that Apple's iPhone 5S introduces one of the best implementations of fingerprint scanning, but it's not been plain sailing for everyone. Read More .


So how is eye-scanning technology used right now, and when can we realistically expect it to be implemented in mobile devices? When it does arrive, will it be as secure and reliable as we need it to be? Let’s find out.

Retina Scanners Vs. Iris Scanners

First off, we need to differentiate between retina and iris scanners, as the terms are often used interchangeably, but are in fact very different processes.

Retina Scanner: How It Works

A retina scanner shoots an invisible infrared light into your eyeball and measures how much light is reflected back off your retina. Your retina is a thin layer of cells in the back of your eye that is made up of a complex network of blood vessels unique to only you. Since blood vessels reflect less light than the rest of the retina, the pattern of reflection in your eye from this infrared light is completely unique.



Pros And Cons Of Retina Scanning

Unfortunately, while your retina is generally unchanged for your entire life, certain diseases like diabetes, glaucoma, and other eye-related disorders can affect the structure of the retina. This means that if you rely on a device unlocking from a perfect image of your retina, and your retina changes due to a disease, you would be locked out of your device.

Retina scanning also involves a user getting very close to a device (within inches) and having a beam of infrared light shot into their eye. This makes it rather invasive and annoying to perform on a regular basis.

However, while it has many drawbacks as a use for smartphone unlocking, its medical applications are huge. While only certain diseases actually change the blood vessel structure of the retina enough to make it unidentifiable, many other diseases, including AIDS and malaria, can be detected by retina scanners. If a retina scanner was built-in to your phone, a weekly or monthly scan could keep you up-to-date on any diseases you may have caught and allow you to see a doctor before other symptoms arise.

Iris Scanner: How It Works

An iris scanner works much like a regular camera, except that after taking a picture (or short video) of your eye, it runs some serious calculations to measure the exact patterns in your iris. Your iris is the colorful part of your eye surrounding the black dot in the center called the pupil. Your “eye color” is really the color of your iris.


If you take a look closely in the mirror, you can see that your iris isn’t one solid color, but rather a complex structure of cells that is huge, magnificent, and best of all, entirely unique. The scanner can identify the unique patterns of the iris by shooting near-infrared light into the eyeball and determining the intricate structures of the iris from the light that returns.


Pros And Cons Of Iris Scanning

Iris scanning, for the most part, is considered the better of the two methods. It can be done from a greater distance, in some cases up to meters away from an individual, and is therefore less intrusive. It’s also less prone to changes due to disease, because a person’s iris generally stays the same for their entire life, except in cases of extreme injury to the eye. The iris, as a protected, unchanging, yet completely unique feature of the human body, is often seen as the best chance we have of ever perfectly identifying people.

Of course, because it works by taking a picture or short video of the iris, it is theoretically possible that an iris scanner could be fooled by a high quality image or a convincing reproduction of an eyeball. Some iris scanners, though, incorporate checks to ensure that the eyeball belongs to a live person. These kinds of checks can vary, and are still in production in many cases, but they range from shooting a burst of light to dilate the pupils, to judging the subtle facial movements around the eye over the course of a couple seconds. Many of these live checks offer less convenience, though, since a burst of bright light to the eye isn’t very fun, and recording a short video to judge facial movements takes too much time.


Because iris scanners are in many ways superior to retina scanners, it’s probably safe to assume that if scanners ever do make it into smartphones, they will be iris scanners.

Is It Secure?

Now the biggest concern many of you are going to have with this is your security and your privacy. If iris scanners do make their way into smartphones in the future, you can bet that there will be a huge hubbub over security and privacy concerns — just as there was when Apple announced their iPhone’s fingerprint scanner Does the iPhone 5S Fingerprint Scanner Increase The Chance of Theft? The iPhone's new fingerprint sensor seems like a great way to use biometrics to keep the device secure and personal, but could the feature be used against the owner to circumvent existing protections? Read More .


And many of the questions remain the same. Users were worried that if Apple stored fingerprints in their databases, then organizations like the NSA could gain access to that and therefore have your fingerprint without your permission. Iris scanners pose the same problem: once your iris is scanned and that information is stored somewhere, it is possible that it could be stolen or snooped on by nefarious groups.



On the other hand, many people wondered if a severed finger could be used to unlock an iPhone, and that’s an even scarier prospect when you’re talking about iris scanning — nobody wants to have their eyeball gouged out after having their phone stolen. This concern boils down to how these scanners are implemented and whether or not smartphone manufacturers implement live person checks with their scanners. But since live checks often come at the cost of convenience, it’s unlikely we’ll see a perfect foolproof eye scanner hitting the market anytime soon.

In the mean time, passwords are still going to be one of the most secure and reliable forms of locking 13 Ways to Make Up Passwords That Are Secure and Memorable Want to know how to make up a secure password? These creative password ideas will help you create strong, memorable passwords. Read More , although they aren’t the most convenient.

Current Implementations

Many government and corporate organizations use iris scanning as a secure means of restricting access to certain areas, and hundreds of airports around the world have implemented iris scanners as a form of identification even more secure than passports for easier travel. These kinds of scanners are large, expensive, and not at all suited for mobile. Below, you can see a picture of the scanners used in a Frankfurt airport in 2005.


Other times, mobile scanners, about the size of a big camera, can be used to quickly identify many people at once. In 2002, when Afghan refugees to Pakistan were being repatriated into their country, iris scanners were used to ensure that nobody was receiving multiple cash grants or more than their fair allowance of other assistance items. US Marines also used similar handheld iris scanners to identify members of the Baghdad City Council back in 2007, shown below.


In other cases, large multi-person iris scanners have been deployed as a security measure. In Leon, Mexico, scanners can identify up to 50 people per minute, even while they’re walking, and can help identify those who want to use an ATM, a hospital, or even ride a bus. That may seem a little futuristic and dystopic to some, but it was actually put into place four years ago in 2010. Privacy concerns aside, the technology behind that is amazing.

So far, consumer scanners are limited, although EyeLock is looking to change that. Their myris scanner plugs into your computer via USB and can replace all of your passwords. This isn’t quite at the level of being integrated into a smartphone, but it’s certainly getting there.

Can It Fit Inside A Smartphone?

Anthony Antolino, the Chief Marketing and Business Development Officer at EyeLock, expects to see iris scanners coming to computers and mobile devices in 2015. He says that while the technology has been around for a while, it is now finally becoming fast enough and easy enough to be used by the everyday consumer.


Modern scanners can work in an instant, even if users are walking or wearing glasses or contacts. The biggest problem might be fitting a high quality camera and a near-infrared light into a smartphone. Current front-facing shooters, like the 2MP cameras on most high-end Android phones and the 1.2MP camera on the iPhone 5S, simply aren’t high enough quality to view the iris well enough.

Additionally, smartphone manufacturers will need to find a way to squeeze in the near-infrared light and have it all operate fast enough that it isn’t noticeable for users or a significant drain on the phone’s resources.


Whether or not this comes as soon as the Galaxy Note 4 or iPhone 6 is yet to be seen, but it will almost certainly be coming at some point within the next few years.

Would You Use An Iris Scanner?

Iris scanning clearly has its strengths and weaknesses, but what it really comes down to is if people will use it in their mobile devices.

Would you use an iris scanner if it was built into your next smartphone? Is the convenience and security good enough to warrant it, or are you worried about the privacy aspect of having your iris scanned? Let us know in the comments.

Image Credit: browsing her smart phone Via Shutterstock, Iris scanner to unlock phone, Scan for security or identification, Video surveillance and privacy issues concept illustration, Eye macro, and Human eye anatomy from Shutterstock, Flickr/John Karakatsanis, Wikipedia/USMC Sergeant identifies Baghdaddi city council member with iris scanner.

Related topics: Biometrics, Fingerprints, Smartphone Security, Travel.

Affiliate Disclosure: By buying the products we recommend, you help keep the site alive. Read more.

Whatsapp Pinterest

Leave a Reply

Your email address will not be published. Required fields are marked *

  1. Den Eng
    August 21, 2014 at 5:45 am

    Interesting point raised by the article: do you want the NSA to have your fingerprint information? What a nice choice to have! I am by no means complaining, since I am a "plebian", but the Singapore Government already has at least one finger/thumb print of each of its citizens. In which case, it doesn't bother me one bit that my government has that portion of my biometric data. having said that, as I am a pleb, I am unable to conceive exactly what use the government would have for my fingerprints, since I do not use them for any data-protection purposes. Also, it makes going through immigration at my home airport a breeze - scan passport, scan thumbprint, IN!

    still, it doesn't mean that i would like using an iris scanner in the near future. Watched too many sci fi films for that. Please don't dig out my eyeballs.

  2. DAVID
    August 19, 2014 at 10:55 pm

    scan my retina?
    just like i said to the military while walking out of the MEPS station..
    GO ^%#$#! yourself!

  3. John
    August 19, 2014 at 10:11 pm

    I think in the future we will have a little pin to stick yourself with, using your blood to analiza your DNA sequence, plus your retina and fingerprint, throw in a breath analyzer and a palm vein scan... it gets to a point of ridiculousness. Like someone else said, nobody wants your data unless you have something of value, which in thatcase you should know better than to have it accessible on your phone (passwords shouldnt be saved, account information stored in a safe, private pictures in an external hardrive in a safe). This seems like the continuation of the mass collection of biometric information with god knows what purpose. Apple was first with fingerprint scanning and Samsung followed suit. Now its Samsung's turn to dish out the next privacy violating tech to spread out the negative blame.

  4. Stephen G. Barr
    August 19, 2014 at 6:03 pm

    I would keep an eye (no pun intended) on Launchkey's evolving security technology. Instead of attempting to verify the authenticity of physical badges or ID cards with error-prone human eyes, LaunchKey identification can be verified with on-demand authentication requests that utilize anything from a biometric verification to a knowledge factor of authentication.

  5. Vipul J
    August 19, 2014 at 5:54 pm

    Honestly I couldn't care less about more security than a pattern lock. I mean I don't carry government secrets around. At max my phone gets stolen and I change my account passwords as soon as I realize. Why would I need a scanner, thumb print or retinal?

  6. Bben
    August 19, 2014 at 4:28 pm

    Every time I have seen some new hi tech ID method - there will be those who claim they are useless because someone came up with some esoteric way to bypass them - like cutting off your finger to get your fingerprint - or the convoluted process used by Myth busters to bypass a fingerprint scanner - But guess what - NOBODY is going to go to that much trouble to get your pass key for your Iphone - your data is just not that valuable to them - unless of course you have nuclear launch codes or some other secret that a real superspy wants to steal. stored on your phone. Then all they need to do is put a gun up to your head. So lets just quit playing games and implement some of these simple biometric keys - and a second key as well just to make you feel safer. I would like to see something like an iris scanner - and a physical gadget like a usb key adopted. You would need both to unlock.

  7. Scott T
    August 19, 2014 at 3:05 pm

    I'd definitely use it if it were available on iPhone. Just turn off the simple passcode, use a super long one, and then set up your retina/iris scan to input it for you, automatically.

  8. Jeff
    August 19, 2014 at 2:59 pm

    I thought the signature sign in on my Note 3 was pretty cool and fool proof, until you realize you can just bypass that and sign in with your pin. Kind of pointless having it in the first place and I don't think that eye scanning would be any different.

  9. ReadandShare
    August 18, 2014 at 7:07 pm

    I now have unique passwords for my devices and websites. They are also easy to change when needed to. But I suppose I will have only one set of digitized info on my retina or fingerprint? And when (not if, but when) that gets hacked off some careless website -- what do I do? Get new fingerprint or retina?