Finger Print Scanner

Dysan

Is it possible to use a Finger Print Scanner, as a way of logging on to a website?
How do Finger Print Scanners work? What needs to be stored?

dougal85

I'd say... not easily. Finger print scanners are not supported by default in HTML or any browsers that I know of.

You would need to write something custom to handle it, I don't know if its something Flash could do?

Then your relying on people to have a fingerprint scanner. How many people do you know that has one? I do on my laptop... but I don't know anybody else that does.

zingbats

A (basic) finger print scanner could identify the type of print:
whorl, arc etc
and the ridge count

In terms of using as authentication, the only real way would be to use an applet of sorts to aquire from a fingerprint reader.

The reader could either send the data as recognised co-ordinates, patterns etc, or it could simply send an image.

In the case of the image, you'd need some complicated image manipulations to check. If it's simply point data, you're a lot luckier.

Either way, getting a secure way of attaching an applet to the finger print reader will be difficult. I think JAVA would be your best option.

roscor

I think that you would have many issues with storing fingerprints as a means to a use as authentication.

Firstly where and how would you store it (I'm sure it is possible) ??

Second, what are the legal issues with storing such personal information (data protection act) quite relevant in the UK with the two missing disks issue!! You do become a data controller (uk) and would have to register as such with the data commissioner. How many people as members/affiliates etc would allow you to keep that info. You struggle to get many persons to give a real name/email address when registering on any Forum/membership site never mind a Digit dab.

Thirdly when a member/affiliate ceases to be such can you evidence correct disposal of such records.

I would stay well away unless it was purely a LAN system and every one is signed up with disclaimers etc.

dougal85

Even if you can do it, is there any significant advantage or point to it? When you take into account costs? I imagine forcing users to have a strong password might be a better option.

I know its got a cool factor... but not much else.