Difference between revisions of "Integrated Fingerprint Reader"

From ThinkWiki
Jump to: navigation, search
(Related Links)
(Major rewrite to bring up to date with current driver and more machines)
Line 4: Line 4:
 
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;">
 
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;">
 
===Integrated Fingerprint Reader===
 
===Integrated Fingerprint Reader===
IBM released a second generation of T42 models in Autumn 2004 featuring Intel Pentium M 765 processors and an integrated fingerprint reader.
+
IBMs second generation of T42 models (released in Autumn 2004) was the first to feature an integrated fingerprint reader. Various models since then have had this feature, actually implemented with a number of different devices, all of which appear on the USB bus. Some are just scanners, others do the recognition in the device itself.  
  
The fingerprint reader is produced by a company called UPEK, which specializes in the manufacture of fingerprint readers. It is integrated as an USB device, and does all the matching in hardware, making it rather easy to use. Furthermore, IBM states that there's an interface with the [[Embedded Security Subsystem]]. UPEK now sells the fingerprint reader as a USB peripheral bundled with the same underlying software for accessing password-protected online accounts and Windows: [http://www.upek.com/solutions/eikon Eikon Digital Privacy Manager]
+
{|
 +
! Thinkpad Models !! Reader !! Software
 +
|-
 +
|T42(p) T43(p) T60(p) T61(p) || [http://reactivated.net/fprint/wiki/Upekts UPEK]  || thinkfinger or fprint
 +
|-
 +
|V100    || [http://reactivated.net/fprint/wiki/Aes1610 Authentec AES1610] || fprint
 +
|-
 +
|N100    || [http://reactivated.net/fprint/wiki/Aes2501 Authentec AES2501] || fprint
 +
|-
 +
|R61    || [http://www.reactivated.net/fprint/wiki/Upeksonly Upeksonly] || fprint
 +
|-
 +
|T400 x200(s) || Authentec 2810 || unsupported
 +
|}
  
Some new Lenovo ThinkPads including the T400 have switched from the UPEK to one based on the AuthenTec USB device. For Linux users, this means that thinkfinger will no longer work. libfprint will likely soon have a driver.
+
Read more about the various models of reader on the [http://reactivated.net/fprint/wiki/Supported_devices libfprint wiki]
 +
 
 +
The UPEK device is supported by thinkfinger. Those devices and Authentec ones are supported by libfprint.  
  
 
However: The fingerprint reader is an INSECURE device and gives a false sense of security! There has been quite a bit of research by a hacker named Starbug, a member of the Chaos Computer Club, Berlin, Germany. He outlined in two very good talks how to forge each and every available fingerprint sensor available at the cost of a few euros, using materials from your local hardware store, a digicam and a laser printer! Here's some links:
 
However: The fingerprint reader is an INSECURE device and gives a false sense of security! There has been quite a bit of research by a hacker named Starbug, a member of the Chaos Computer Club, Berlin, Germany. He outlined in two very good talks how to forge each and every available fingerprint sensor available at the cost of a few euros, using materials from your local hardware store, a digicam and a laser printer! Here's some links:
Line 15: Line 29:
 
Remember, using fingerprints for authentication is much similar to having a password which is written on anything you touch.
 
Remember, using fingerprints for authentication is much similar to having a password which is written on anything you touch.
  
==Open Source==
+
==Free Software==
  
There is a new GPL driver at http://thinkfinger.sourceforge.net; see the [[How to enable the fingerprint reader with ThinkFinger]] for detailed instructions. This is the recommended option as it integrates more seamlessly with PAM and doesn't produce a tacky graphical prompt.
+
For some time various projects provided supprot for various readers. That work is being unified under the fprint library, and thus libfprint, and libpam-fprint (which allows it to be used for authentication via PAM) are the best way to go. These are not yet available in all distros, and for those, where you have supported hardware older software such as thinkfinger is more widely available at the time of writing.
 +
 
 +
There is a GPL driver at http://thinkfinger.sourceforge.net; see the [[How to enable the fingerprint reader with ThinkFinger]] for detailed instructions. It is also in Debian Lenny. This integrates seamlessly with PAM and doesn't produce a tacky graphical prompt.
  
 
{{HINT|If you've followed the instructions and "tf-tool --verify" works, but nothing else does, make sure that the "uinput" module is loaded.}}
 
{{HINT|If you've followed the instructions and "tf-tool --verify" works, but nothing else does, make sure that the "uinput" module is loaded.}}
  
 
Newer variants of the {{R61}} require a different driver.  This newer fingerprint reader [http://www.reactivated.net/fprint/wiki/Upeksonly device] sits on the USB bus with USB ID 147e:2016.  An open source driver has been developed by [http://www.reactivated.net/fprint/wiki/Main_Page the fprint project].  Installation instructions can be found at [http://knowledge76.com/index.php/Fingerprint_Reader_Installation System76].
 
  
 
==Binary Only==
 
==Binary Only==
A closed source driver from the vendor has been released.  It interfaces to the hardware as a user-space USB driver through {{path|/proc/bus/usb|}} and provides a BioAPI 1.10 device, which can then be interfaced to pam for authentication by user programs.  The driver can be downloaded from http://www.upek.com/support/dl_linux_bsp.asp; see the [[How to enable the fingerprint reader|corresponding HOWTO]] for detailed instructions. It however tends to be less stable than the above opensource driver.
+
A closed source driver for the UPEK device is available.  It interfaces to the hardware as a user-space USB driver through {{path|/proc/bus/usb|}} and provides a BioAPI 1.10 device, which can then be interfaced to pam for authentication by user programs.  The driver can be downloaded from http://www.upek.com/support/dl_linux_bsp.asp; see the [[How to enable the fingerprint reader|corresponding HOWTO]] for detailed instructions. It however tends to be less stable than the above opensource drivers.
  
 
==Related Links==
 
==Related Links==
 
* [http://www.trustedreviews.com/article.aspx?page=1643&head=36 Review from TrustedReviews of the fingerprint scanner]
 
* [http://www.trustedreviews.com/article.aspx?page=1643&head=36 Review from TrustedReviews of the fingerprint scanner]
 +
* [http://www.reactivated.net/fprint/wiki/Main_Page fprint project]
 
* [http://biomark.org.ru/en/ A (Russian) project that provides support for a (different model) of fingerprint scanner] (also a USB device, though)
 
* [http://biomark.org.ru/en/ A (Russian) project that provides support for a (different model) of fingerprint scanner] (also a USB device, though)
 
* [http://www.upek.com/support/pdf/UPEK_flyer_TCS3_TCD4.pdf TouchStrip TCS3/TCD4 spec sheet]
 
* [http://www.upek.com/support/pdf/UPEK_flyer_TCS3_TCD4.pdf TouchStrip TCS3/TCD4 spec sheet]
 
* [http://www.qrivy.net/~michael/blua/ A branch of the BioAPI reference implementation]
 
* [http://www.qrivy.net/~michael/blua/ A branch of the BioAPI reference implementation]
* [http://www.reactivated.net/fprint/wiki/Main_Page fprint project]
 
 
* [http://www.pdfserver.net/fingerprint A Gui using the Bioapi driver on thinkpads. Windows like GDM login]
 
* [http://www.pdfserver.net/fingerprint A Gui using the Bioapi driver on thinkpads. Windows like GDM login]
  

Revision as of 02:00, 3 April 2009

IBM Integrated Fingerprint Reader

Integrated Fingerprint Reader

IBMs second generation of T42 models (released in Autumn 2004) was the first to feature an integrated fingerprint reader. Various models since then have had this feature, actually implemented with a number of different devices, all of which appear on the USB bus. Some are just scanners, others do the recognition in the device itself.

Thinkpad Models Reader Software
T42(p) T43(p) T60(p) T61(p) UPEK thinkfinger or fprint
V100 Authentec AES1610 fprint
N100 Authentec AES2501 fprint
R61 Upeksonly fprint
T400 x200(s) Authentec 2810 unsupported

Read more about the various models of reader on the libfprint wiki

The UPEK device is supported by thinkfinger. Those devices and Authentec ones are supported by libfprint.

However: The fingerprint reader is an INSECURE device and gives a false sense of security! There has been quite a bit of research by a hacker named Starbug, a member of the Chaos Computer Club, Berlin, Germany. He outlined in two very good talks how to forge each and every available fingerprint sensor available at the cost of a few euros, using materials from your local hardware store, a digicam and a laser printer! Here's some links:

Remember, using fingerprints for authentication is much similar to having a password which is written on anything you touch.

Free Software

For some time various projects provided supprot for various readers. That work is being unified under the fprint library, and thus libfprint, and libpam-fprint (which allows it to be used for authentication via PAM) are the best way to go. These are not yet available in all distros, and for those, where you have supported hardware older software such as thinkfinger is more widely available at the time of writing.

There is a GPL driver at http://thinkfinger.sourceforge.net; see the How to enable the fingerprint reader with ThinkFinger for detailed instructions. It is also in Debian Lenny. This integrates seamlessly with PAM and doesn't produce a tacky graphical prompt.

Hint:
If you've followed the instructions and "tf-tool --verify" works, but nothing else does, make sure that the "uinput" module is loaded.


Binary Only

A closed source driver for the UPEK device is available. It interfaces to the hardware as a user-space USB driver through /proc/bus/usb and provides a BioAPI 1.10 device, which can then be interfaced to pam for authentication by user programs. The driver can be downloaded from http://www.upek.com/support/dl_linux_bsp.asp; see the corresponding HOWTO for detailed instructions. It however tends to be less stable than the above opensource drivers.

Related Links

Models featuring this Technology

Related information