Every smartphone camera is unique. During manufacturing, tiny imperfections naturally occur in the camera sensor — microscopic variations that are impossible to reproduce, even by the manufacturer itself. These variations form a distinct pattern known as a Photo-Response Non-Uniformity (PRNU) — essentially, the camera’s DNA.Unlike digital identifiers, PUFs cannot be replicated, extracted, or simulated by AI. This allows a bank to cryptographically verify that a device is the device it claims to be—creating a root of trust grounded in physics rather than software. By tying authentication to the physical uniqueness of a device, PUFs restore trust where AI exploits have undermined traditional methods.

ToothPic uses this intrinsic pattern as a Physical Unclonable Function (PUF) to create a hardware-based digital identity for each smartphone. When authentication is required, the device uses this fingerprint to securely reconstruct a cryptographic key that proves it is genuine.

No secret keys are stored, and no biometric or personal data is ever captured. Instead, the authentication process relies purely on physics, making it impossible for AI or malware to replicate.