We have had a run on the last three months on consultancy gigs linking last
year's generation of finger reader sensors with TPM enforcement modules.
Things in the embedded/passport TPM world obviously hit critical mass, at
several points - across the world's usual manufacturers. 

If any of the smaller manufacturing houses doing innovative sensor or
wireless (magnetic/RF) work want help, here, let me know: we be happy to
ensure the playing field is level! The key is to have the finger factor
control the _pre-boot_ phase of windows, which is a hard problem to solve in
bios/acpi/windows interaction. While we don't have much know-how in the
linux world's equivalent, we'd be happy to supply what we do know from the
windows/i386 motherboard world, to suitable open system developer groups
building focusing on TPM products.

This is a bit off topic, as TPM/finger interaction operates a bit
differently to the way that javacard and bioAPI stuff work. The TPM world
assumes bios and kernel driver involvement, whereas java/musclecards
enhanced with the javacard forum's simplistic bio package have
(traditionally had) no knowledge of the motherboard-based trust systems.

Peter.

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:muscle-
> [EMAIL PROTECTED] On Behalf Of Bruce Barnett
> Sent: Friday, June 10, 2005 12:58 PM
> To: [email protected]
> Subject: Re: [Muscle] Fingerprint matching on JCOP31bio
> 
> 
> > But, all biometric systems are insecure.
> 
> If used as the single factor of authentication, then perhaps.
> But if you require PIN, biometrics, AND the card to authenticate - this is
> three factor authentication, and stronger than PIN+card.
> 
> Some systems do "match on card" as well. If the biometrics unlocked the
> card and keys, that also provides security. I think some biometrics that
> use match-on-card have readers that return what is requested, so the
> biometrics are not re-playable.
> 
> 
> >At the moment biometric is only a toy
> 
> 
> Some are toys, and none are perfect, I agree.
> 
> >and it is easy to forge fingerprint
> 
> Some companies use techniques to defeat simple techniques as you describe,
> such as measuring characteristies beneath the surface of the skin.
> 
> 
> I'm not sure anyone has defeated iris scanning, as these systems are
> suppose to understand how the pupil dialates under different light
> conditions.
> 
> _______________________________________________
> Muscle mailing list
> [email protected]
> http://lists.drizzle.com/mailman/listinfo/muscle
_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to