On 14 Jul 2013, at 20:00, fprint-requ...@lists.freedesktop.org wrote:
> Send fprint mailing list submissions to
> fprint@lists.freedesktop.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.freedesktop.org/mailman/listinfo/fprint
> or, via email, send a message with subject or body 'help' to
> fprint-requ...@lists.freedesktop.org
>
> You can reach the person managing the list at
> fprint-ow...@lists.freedesktop.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of fprint digest..."
>
>
> Today's Topics:
>
> 1. fingerprints as a crypto key? (Brian J. Murrell)
> 2. Re: fingerprints as a crypto key? (Pavel Herrmann)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sat, 13 Jul 2013 22:45:24 -0400
> From: "Brian J. Murrell" <br...@interlinx.bc.ca>
> To: fprint@lists.freedesktop.org
> Subject: [fprint] fingerprints as a crypto key?
> Message-ID: <51e210c4.4020...@interlinx.bc.ca>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> I opened bug 66881 about this but I wonder if discussion on the list is
> more appropriate so here goes...
>
> I wonder what the general consensus is about using fingerprints to
> [un]lock a password store. Is there enough information in a fingerprint
> to provide a decent level of cryptographic security?
>
http://homepages.cs.ncl.ac.uk/feng.hao/files/biocrypt_TC.pdf
Some research in this area. Based on iris scanners but the principle is the same
Problems include false negatives locking you out
- we use fingerprint recognition for identifying patients in order to dispense
controlled drugs to them daily but we need to relearn their prints every couple
of months and use a stored photo of the patient as a second identifier for the
dispenser
And
If you have your machine compromised and your fingerprint image hash stolen
then how do you revoke that "key"
The paper above was written in conjunction with Professor Ross Anderson, author
of "Security Engineering" and may be if interest to you
Mike
_______________________________________________
fprint mailing list
fprint@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/fprint
