Justin,

Thanks for the information. I searched a little bit, and found valuable
data...


The most interesting thing that I saw was a Diploma Thesis from Josef Hajas 
(2005) : https://dip.felk.cvut.cz/browse/pdfcache/hajasj1_2007dipl.pdf The 
title is : Integration of a biometric user authentication in unix-like systems.

It was a very well made document, and, from what I've read, it's
possible to make authentication (one-to-one) and identification (one-to-
few) routines in a secure way.


First, a personal case : In my gym, they have a fingerprint-based gate. The 
only think you have to do to get in is to put your finger on the reader, and 
wait a few moments. It then says a message like "Have a good day, Wladston!", 
with my photo. I notice other people using this system, and the picture always 
mach the faces :) Also, I doubt that my academy would use such system if there 
is any chance of collisions, considering this is the only control form, and 
they should have about 500~1k registered users (it's a big gym!)

The pay-by-thouch system, however, asks you a localization code + finger
(the localization code usually is the phone number) ... but maybe they
just do it for acceleration ...


I'm attaching a very interesting part of this work : 
"A fingerprint may contain on average between 75 and 175 minutiae
points[53]. Only some twenty minutiae points are enough for identification 
[43]. Most of
the advanced devices for storing fingerprints for later matching store only 
these several
points. It is therefore not possible to produce a complete fingerprint from 
this stored
information. If the attacker fails to find the key to how these points are 
chosen, he also
fails to make a usable counterfeit of the recorded fingerprint from the 
existing fingerprint
copy outside the reader."

Please, take a read on the document, and tell me what you think of it
....

-- 
Edgy should include 'bioapi' to support fingerprint readers
https://bugs.launchpad.net/bugs/54816
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to