<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xml:lang="ru"><front><journal-meta><journal-id journal-id-type="publisher-id">msi</journal-id><journal-title-group><journal-title xml:lang="ru">Современная наука и инновации</journal-title><trans-title-group xml:lang="en"><trans-title>Modern Science and Innovations</trans-title></trans-title-group></journal-title-group><issn pub-type="ppub">2307-910X</issn><publisher><publisher-name>North-Caucasus Federal University</publisher-name></publisher></journal-meta><article-meta><article-id pub-id-type="doi">10.37493/2307-910X.2025.3.1</article-id><article-id custom-type="elpub" pub-id-type="custom">msi-1769</article-id><article-categories><subj-group subj-group-type="heading"><subject>Research Article</subject></subj-group><subj-group subj-group-type="section-heading" xml:lang="ru"><subject>ТЕХНИЧЕСКИЕ НАУКИ ИНФОРМАТИКА, ВЫЧИСЛИТЕЛЬНАЯ ТЕХНИКА И УПРАВЛЕНИЕ</subject></subj-group><subj-group subj-group-type="section-heading" xml:lang="en"><subject>TECHNICAL SCIENCES INFORMATION, COMPUTING AND MANAGEMENT</subject></subj-group></article-categories><title-group><article-title>Кибербезопасность биометрических хранилищ на спортивных объектах и необратимость утечек</article-title><trans-title-group xml:lang="en"><trans-title>Cybersecurity of biometric data storage at sports facilities and the irreversibility of leaks</trans-title></trans-title-group></title-group><contrib-group><contrib contrib-type="author" corresp="yes"><contrib-id contrib-id-type="orcid">https://orcid.org/0009-0008-8260-0531</contrib-id><name-alternatives><name name-style="eastern" xml:lang="ru"><surname>Саяпов</surname><given-names>А. А.</given-names></name><name name-style="western" xml:lang="en"><surname>Sayapov</surname><given-names>A. A.</given-names></name></name-alternatives><bio xml:lang="ru"><p>Саяпов Альберт Альбертович, Менеджер по решениям контроля доступа</p><p>Майами</p></bio><bio xml:lang="en"><p>Albert Sayapov, Access Control Solutions Manager</p><p>Miami</p></bio><email xlink:type="simple">scholar@sayapov.net</email><xref ref-type="aff" rid="aff-1"/></contrib></contrib-group><aff-alternatives id="aff-1"><aff xml:lang="ru"><institution>FIFA</institution><country>Соединённые Штаты Америки</country></aff><aff xml:lang="en"><institution>FIFA</institution><country>United States</country></aff></aff-alternatives><pub-date pub-type="collection"><year>2025</year></pub-date><pub-date pub-type="epub"><day>26</day><month>01</month><year>2026</year></pub-date><volume>0</volume><issue>3</issue><fpage>10</fpage><lpage>19</lpage><permissions><copyright-statement>Copyright &amp;#x00A9; Саяпов А.А., 2026</copyright-statement><copyright-year>2026</copyright-year><copyright-holder xml:lang="ru">Саяпов А.А.</copyright-holder><copyright-holder xml:lang="en">Sayapov A.A.</copyright-holder><license xml:lang="ru" license-type="creative-commons-attribution" xlink:href="https://creativecommons.org/licenses/by/4.0/" xlink:type="simple"><license-p>Данная работа распространяется под лицензией Creative Commons Attribution 4.0.</license-p></license><license xml:lang="en" license-type="creative-commons-attribution" xlink:href="https://creativecommons.org/licenses/by/4.0/" xlink:type="simple"><license-p>This work is licensed under a Creative Commons Attribution 4.0 License.</license-p></license></permissions><self-uri xlink:href="https://msi.elpub.ru/jour/article/view/1769">https://msi.elpub.ru/jour/article/view/1769</self-uri><abstract><p>Введение. В статье рассматривается кибербезопасность биометрических хранилищ на спортивных объектах с целью оценить природу и последствия утечек, установить степень необратимости компрометации биометрических шаблонов и предложить практические меры уменьшения рисков. Материалы и методы. Исследование опирается на сравнительный анализ архитектур хранения, разбор документированных инцидентов (включая массовые утечки верификационных платформ), обзор регуляторных требований и данные о векторах атак в многоузловых инфраструктурах. Актуальность работы продиктована массовым внедрением «лицо-как-пропуск» и интеграцией биометрии в платежи и программы лояльности, что трансформирует турникет в центральный узел коммерческого и идентификационного риска; показано, что современные методы реконструкции из хешированных векторов и широкие возможности перекрёстного сопоставления делают компрометацию долгосрочной и системной. Результаты и обсуждение. Новизна состоит в синтезе эмпирики утечек и технологического анализа с предложением прикладной архитектуры защиты — сочетания отзывной токенизации, аппаратного хранения ключей и сверки в защищённых вычислительных зонах — и в продуктовой формулировке комплекса организационных мер (микросегментация, red-team, контрактная дисциплина, минимизация данных). Заключение. Биометрические шаблоны образуют критическую «точку отказа», ущерб от которой носит кумулятивный и практически необратимый характер; технические контрмеры без устойчивых организационных практик и постоянного управления риском недостаточны. Статья будет полезна операторам арен, поставщикам биометрических решений, командам кибербезопасности, регуляторам и исследователям в области приватности.</p></abstract><trans-abstract xml:lang="en"><p>Introduction. This article examines the cybersecurity of biometric storage systems at sports venues with the aim of assessing the nature and consequences of leaks, establishing the degree of irreversibility of biometric template compromise, and proposing practical risk mitigation measures. Materials and methods. The study is based on a comparative analysis of storage architectures, a review of documented incidents (including massive leaks of verification platforms), a review of regulatory requirements, and data on attack vectors in multi-node infrastructures. The relevance of this work is dictated by the widespread adoption of "face-as-pass" systems and the integration of biometrics into payments and loyalty programs, which transforms the turnstile into a central hub for commercial and identification risk. It is shown that modern methods of reconstruction from hashed vectors and extensive cross-matching capabilities make compromises long-term and systemic. Results and discussion. The novelty lies in the synthesis of leak empirical data and technological analysis, with a proposal for an applied security architecture—a combination of revocable tokenization, hardware-based key storage, and verification in secure computing areas—and a product-based formulation of a set of organizational measures (microsegmentation, red-teaming, contractual discipline, and data minimization). Conclusion. The key conclusion is that biometric templates form a critical "point of failure," the damage from which is cumulative and virtually irreversible; technical countermeasures without robust organizational practices and ongoing risk management are insufficient. This article will be useful for arena operators, biometric solution providers, cybersecurity teams, regulators, and privacy researchers.</p></trans-abstract><kwd-group xml:lang="ru"><kwd>биометрические хранилища</kwd><kwd>стадионы</kwd><kwd>утечка данных</kwd><kwd>необратимость</kwd><kwd>токенизация</kwd><kwd>микросегментация</kwd><kwd>аппаратные криптомодули</kwd></kwd-group><kwd-group xml:lang="en"><kwd>biometric storage</kwd><kwd>stadiums</kwd><kwd>data leakage</kwd><kwd>irreversibility</kwd><kwd>tokenization</kwd><kwd>microsegmentation</kwd><kwd>hardware crypto modules</kwd></kwd-group></article-meta></front><back><ref-list><title>References</title><ref id="cit1"><label>1</label><citation-alternatives><mixed-citation xml:lang="ru">Haskins C. Stadiums Are Embracing Face Recognition. Privacy Advocates Say They Should Stick to Sports [Электронный ресурс]. WIRED. 21.08.2024. URL: https://www.wired.com/story/facerecognition-stadiums-protest/ (дата обращения: 23.07.2025).</mixed-citation><mixed-citation xml:lang="en">Haskins C. Stadiums Are Embracing Face Recognition. Privacy Advocates Say They Should Stick to Sports [Электронный ресурс]. WIRED. 21.08.2024. URL: https://www.wired.com/story/facerecognition-stadiums-protest/ (дата обращения: 23.07.2025).</mixed-citation></citation-alternatives></ref><ref id="cit2"><label>2</label><citation-alternatives><mixed-citation xml:lang="ru">Kapustka P. Wicket’s facial authentication technology a ticket to success for Cleveland Browns [Электронный ресурс]. Stadium Tech Report. 28.02.2024. URL: https://stadiumtechreport.com/feature/wickets-facial-authentication-technology-a-ticket-to-success-forcleveland-browns/ (дата обращения: 24.07.2025).</mixed-citation><mixed-citation xml:lang="en">Kapustka P. Wicket’s facial authentication technology a ticket to success for Cleveland Browns [Электронный ресурс]. Stadium Tech Report. 28.02.2024. URL: https://stadiumtechreport.com/feature/wickets-facial-authentication-technology-a-ticket-to-success-forcleveland-browns/ (дата обращения: 24.07.2025).</mixed-citation></citation-alternatives></ref><ref id="cit3"><label>3</label><citation-alternatives><mixed-citation xml:lang="ru">Introducing NEC’s Digital ID For Stadiums And Sporting Arenas [Электронный ресурс]. NECAM. URL: https://www.necam.com/digitalid/stadium/ (дата обращения: 25.07.2025).</mixed-citation><mixed-citation xml:lang="en">Introducing NEC’s Digital ID For Stadiums And Sporting Arenas [Электронный ресурс]. NECAM. URL: https://www.necam.com/digitalid/stadium/ (дата обращения: 25.07.2025).</mixed-citation></citation-alternatives></ref><ref id="cit4"><label>4</label><citation-alternatives><mixed-citation xml:lang="ru">Taylor J. Major breach found in biometrics system used by banks, UK police and defence firms [Электронный ресурс]. The Guardian. 14.08.2019. URL: https://www.theguardian.com/technology/2019/aug/14/major-breach-found-in-biometrics-system-usedby-banks-uk-police-and-defence-firms (дата обращения: 26.07.2025).</mixed-citation><mixed-citation xml:lang="en">Taylor J. Major breach found in biometrics system used by banks, UK police and defence firms [Электронный ресурс]. The Guardian. 14.08.2019. URL: https://www.theguardian.com/technology/2019/aug/14/major-breach-found-in-biometrics-system-usedby-banks-uk-police-and-defence-firms (дата обращения: 26.07.2025).</mixed-citation></citation-alternatives></ref><ref id="cit5"><label>5</label><citation-alternatives><mixed-citation xml:lang="ru">Pearson J. A Face Recognition Firm That Scans Faces for Bars Got Hacked—and That’s Just the Start [Электронный ресурс]. WIRED. 02.05.2024. URL: https://www.wired.com/story/outabox-facialrecognition-breach/ (дата обращения: 27.07.2025).</mixed-citation><mixed-citation xml:lang="en">Pearson J. A Face Recognition Firm That Scans Faces for Bars Got Hacked—and That’s Just the Start [Электронный ресурс]. WIRED. 02.05.2024. URL: https://www.wired.com/story/outabox-facialrecognition-breach/ (дата обращения: 27.07.2025).</mixed-citation></citation-alternatives></ref><ref id="cit6"><label>6</label><citation-alternatives><mixed-citation xml:lang="ru">ENISA. ENISA Threat Landscape 2023 [Электронный ресурс]. 2023. URL: https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Threat%20Landscape%202023.pdf (дата обращения: 28.07.2025).</mixed-citation><mixed-citation xml:lang="en">ENISA. ENISA Threat Landscape 2023 [Электронный ресурс]. 2023. URL: https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Threat%20Landscape%202023.pdf (дата обращения: 28.07.2025).</mixed-citation></citation-alternatives></ref><ref id="cit7"><label>7</label><citation-alternatives><mixed-citation xml:lang="ru">Reuters. Amazon’s palm print recognition raises concern among U.S. senators [Электронный ресурс]. Reuters. 13.08.2021. URL: https://www.reuters.com/technology/amazons-palm-printrecognition-raises-concern-among-by-us-senators-2021-08-13/ (дата обращения: 29.07.2025).</mixed-citation><mixed-citation xml:lang="en">Reuters. Amazon’s palm print recognition raises concern among U.S. senators [Электронный ресурс]. Reuters. 13.08.2021. URL: https://www.reuters.com/technology/amazons-palm-printrecognition-raises-concern-among-by-us-senators-2021-08-13/ (дата обращения: 29.07.2025).</mixed-citation></citation-alternatives></ref><ref id="cit8"><label>8</label><citation-alternatives><mixed-citation xml:lang="ru">Europol. Biometric vulnerabilities: Ensuring future law enforcement preparedness [Электронный ресурс]. 2025. URL: https://www.europol.europa.eu/cms/sites/default/files/documents/Biometricvulnerabilities.pdf (дата обращения: 30.07.2025).</mixed-citation><mixed-citation xml:lang="en">Europol. Biometric vulnerabilities: Ensuring future law enforcement preparedness [Электронный ресурс]. 2025. URL: https://www.europol.europa.eu/cms/sites/default/files/documents/Biometricvulnerabilities.pdf (дата обращения: 30.07.2025).</mixed-citation></citation-alternatives></ref><ref id="cit9"><label>9</label><citation-alternatives><mixed-citation xml:lang="ru">Meyer C. No Spoofing: An Introduction to Presentation Attack Detection [Электронный ресурс]. Security Management (ASIS Online). 2024. URL: https://www.asisonline.org/securitymanagement-magazine/articles/2024/08/biometrics/presentation-attack-detection/ (дата обращения: 31.07.2025).</mixed-citation><mixed-citation xml:lang="en">Meyer C. No Spoofing: An Introduction to Presentation Attack Detection [Электронный ресурс]. Security Management (ASIS Online). 2024. URL: https://www.asisonline.org/securitymanagement-magazine/articles/2024/08/biometrics/presentation-attack-detection/ (дата обращения: 31.07.2025).</mixed-citation></citation-alternatives></ref><ref id="cit10"><label>10</label><citation-alternatives><mixed-citation xml:lang="ru">Valenzuela A., Tapia J. E., Chang V., Busch C. Presentation Attack Detection using iris periocular visual spectrum images. Frontiers in Imaging. 2024. Т. 3. DOI: 10.3389/fimag.2024.1478783</mixed-citation><mixed-citation xml:lang="en">Valenzuela A., Tapia J. E., Chang V., Busch C. Presentation Attack Detection using iris periocular visual spectrum images. Frontiers in Imaging. 2024. Т. 3. DOI: 10.3389/fimag.2024.1478783</mixed-citation></citation-alternatives></ref><ref id="cit11"><label>11</label><citation-alternatives><mixed-citation xml:lang="ru">Qandeel M. Facial recognition technology: regulations, rights and the rule of law // Frontiers in Big Data. 2024. Т. 7. DOI: 10.3389/fdata.2024.1354659</mixed-citation><mixed-citation xml:lang="en">Qandeel M. Facial recognition technology: regulations, rights and the rule of law // Frontiers in Big Data. 2024. Т. 7. DOI: 10.3389/fdata.2024.1354659</mixed-citation></citation-alternatives></ref><ref id="cit12"><label>12</label><citation-alternatives><mixed-citation xml:lang="ru">Burt C. Alarming gains in face reconstruction from biometric templates made by researchers [Электронный ресурс]. Biometric Update. 16.05.2025. URL: https://www.biometricupdate.com/202505/alarming-gains-in-face-reconstruction-from-biometrictemplates-made-by-researchers (дата обращения: 01.08.2025).</mixed-citation><mixed-citation xml:lang="en">Burt C. Alarming gains in face reconstruction from biometric templates made by researchers [Электронный ресурс]. Biometric Update. 16.05.2025. URL: https://www.biometricupdate.com/202505/alarming-gains-in-face-reconstruction-from-biometrictemplates-made-by-researchers (дата обращения: 01.08.2025).</mixed-citation></citation-alternatives></ref><ref id="cit13"><label>13</label><citation-alternatives><mixed-citation xml:lang="ru">More Than Facial Recognition [Электронный ресурс]. Carnegie Mellon University (CMU). 2011. URL: https://www.cmu.edu/homepage/society/2011/summer/facial-recognition.shtml (дата обращения: 02.08.2025).</mixed-citation><mixed-citation xml:lang="en">More Than Facial Recognition [Электронный ресурс]. Carnegie Mellon University (CMU). 2011. URL: https://www.cmu.edu/homepage/society/2011/summer/facial-recognition.shtml (дата обращения: 02.08.2025).</mixed-citation></citation-alternatives></ref><ref id="cit14"><label>14</label><citation-alternatives><mixed-citation xml:lang="ru">Senette C., Siino M., Tesconi M. User Identity Linkage on Social Networks: A Review of Modern Techniques and Applications. IEEE Access. 2024. Т. 12. С. 171241–171268. DOI: 10.1109/access.2024.3500374</mixed-citation><mixed-citation xml:lang="en">Senette C., Siino M., Tesconi M. User Identity Linkage on Social Networks: A Review of Modern Techniques and Applications. IEEE Access. 2024. Т. 12. С. 171241–171268. DOI: 10.1109/access.2024.3500374</mixed-citation></citation-alternatives></ref><ref id="cit15"><label>15</label><citation-alternatives><mixed-citation xml:lang="ru">Kessem L. 2025 Cost of a Data Breach Report: Navigating the AI rush without sidelining security [Электронный ресурс]. IBM. 30.07.2025. URL: https://www.ibm.com/think/x-force/2025-cost-of-adata-breach-navigating-ai (дата обращения: 04.08.2025).</mixed-citation><mixed-citation xml:lang="en">Kessem L. 2025 Cost of a Data Breach Report: Navigating the AI rush without sidelining security [Электронный ресурс]. IBM. 30.07.2025. URL: https://www.ibm.com/think/x-force/2025-cost-of-adata-breach-navigating-ai (дата обращения: 04.08.2025).</mixed-citation></citation-alternatives></ref><ref id="cit16"><label>16</label><citation-alternatives><mixed-citation xml:lang="ru">European Central Bank. Study on the payment attitudes of consumers in the euro area 2024 [Электронный ресурс]. 19.12.2024. URL: https://www.ecb.europa.eu/stats/ecb_surveys/space/html/ecb.space2024~19d46f0f17.en.html?utm_source=chatgpt.com (дата обращения: 05.08.2025).</mixed-citation><mixed-citation xml:lang="en">European Central Bank. Study on the payment attitudes of consumers in the euro area 2024 [Электронный ресурс]. 19.12.2024. URL: https://www.ecb.europa.eu/stats/ecb_surveys/space/html/ecb.space2024~19d46f0f17.en.html?utm_source=chatgpt.com (дата обращения: 05.08.2025).</mixed-citation></citation-alternatives></ref><ref id="cit17"><label>17</label><citation-alternatives><mixed-citation xml:lang="ru">Kapustka P. Survey says: Almost half of venues see biometric technology as a top initiative for 2025 [Электронный ресурс]. Stadium Tech Report. 20.11.2024. URL: https://stadiumtechreport.com/feature/survey-says-almost-half-of-venues-see-biometric-technology-as-atop-initiative-for-2025/ (дата обращения: 07.08.2025).</mixed-citation><mixed-citation xml:lang="en">Kapustka P. Survey says: Almost half of venues see biometric technology as a top initiative for 2025 [Электронный ресурс]. Stadium Tech Report. 20.11.2024. URL: https://stadiumtechreport.com/feature/survey-says-almost-half-of-venues-see-biometric-technology-as-atop-initiative-for-2025/ (дата обращения: 07.08.2025).</mixed-citation></citation-alternatives></ref><ref id="cit18"><label>18</label><citation-alternatives><mixed-citation xml:lang="ru">Regulation (EU) 2016/679 of the European Parliament and of the Council [Электронный ресурс]. Official Journal of the European Union. 2016. URL: https://eur-lex.europa.eu/legalcontent/EN/TXT/PDF/?uri=CELEX%3A32016R0679 (дата обращения: 08.08.2025).</mixed-citation><mixed-citation xml:lang="en">Regulation (EU) 2016/679 of the European Parliament and of the Council [Электронный ресурс]. Official Journal of the European Union. 2016. URL: https://eur-lex.europa.eu/legalcontent/EN/TXT/PDF/?uri=CELEX%3A32016R0679 (дата обращения: 08.08.2025).</mixed-citation></citation-alternatives></ref><ref id="cit19"><label>19</label><citation-alternatives><mixed-citation xml:lang="ru">European Commission. AI Act [Электронный ресурс]. 2025. URL: https://digitalstrategy.ec.europa.eu/en/policies/regulatory-framework-ai (дата обращения: 09.08.2025).</mixed-citation><mixed-citation xml:lang="en">European Commission. AI Act [Электронный ресурс]. 2025. URL: https://digitalstrategy.ec.europa.eu/en/policies/regulatory-framework-ai (дата обращения: 09.08.2025).</mixed-citation></citation-alternatives></ref><ref id="cit20"><label>20</label><citation-alternatives><mixed-citation xml:lang="ru">ISO. ISO/IEC 30107-3:2023 [Электронный ресурс]. 2023. URL: https://www.iso.org/standard/79520.html (дата обращения: 09.08.2025.</mixed-citation><mixed-citation xml:lang="en">ISO. ISO/IEC 30107-3:2023 [Электронный ресурс]. 2023. URL: https://www.iso.org/standard/79520.html (дата обращения: 09.08.2025.</mixed-citation></citation-alternatives></ref></ref-list><fn-group><fn fn-type="conflict"><p>The authors declare that there are no conflicts of interest present.</p></fn></fn-group></back></article>
