Windows 10 Fingerprint Introduction and Implementation Yife feng - PowerPoint PPT Presentation

Windows 10 Fingerprint Introduction and Implementation Yife feng ng Zheng ng Softwar are e Engi gineer neer

What’s Biometrics Identification Fingerprint •

Biometrics Advantages

Biometrics Usage

Biometric Identification Gathering and Feature Template Enrollment Quantizing Extracting Storing Gathering and Feature Comparing Identification Quantizing Extracting and Matching

Biometrics Key-points FAR(Fals alse Accept Rate) e) - Uniqueness • FRR(Fals alse e Reject Rate) e) - Reliab abil ilit ity •

Windows Biometric Framework Architecture

Windows Biometric Framework Core Platform

Biometric Device based on USB

Support WBF Fingerprint Devices what needs to be done Devel elop op a a creden dentia tial l prov ovide ider r for logo gon (prov ovided ided by OS from om Win8) • Devel elop op a FMA A to enhance ce the manag nageme ment t (prov ovided ided by OS from m Win8) • Notice No ce: • Win7 FMA A using g diffe feren ent t workin king g flow w as s Win8 or later er, , once devel elop oping ng the FMA/Dr MA/Driver iver/Adapt /Adapter ers s on Win7, they must be based sed-on on Win7 WDK K and instr tructions uctions

Windows In-box Components Notice: • For fingerprint biometric devices that do not have on-chip storage or matching capabilities, Microsoft provides inbox sensor • and storage adapters components. An IHV or ISV must supply the engine adapter component for these devices. For fingerprint biometric devices that do support on-chip matching and storage, the IHV or ISV must supply all BU adapter • components.

WDK Supports

Two Types

T en Positions

Two Standards - NISTIR 6529-A & ANSI-INCITS-381-2004

One Sample

WBDI Driver INF

WBDI Driver

IOCTL Codes

WBIO_CAPTURE_DATA & WINBIO_DATA

WINBIO_BIR & WINBIO_BIR_DATA

WINBIO_BIR_HEADER & WINBIO_REGISTERED_FORMAT

WINBIO_BDB_ANSI_381_HEADER

WINBIO_BDB_ANSI_381_RECORD

Role of Engine Adapter

Expose the WbioQueryEngineInterface external function

WINBIO_ENGINE_INTERFACE

Enrollment Example

Identification Example

Enable Integrity Check /integri egrity tycheck check

T est Sign Add the following command into “Project ->Prop opertie ies->Buil ild Events->Pos ost-Buil ild Event- >Command Line” • Signtool ol sign /v /ph ph /s /s Private ateCertStor ore /n WBFTest.com( com(Test) st) /t http://t /tim imestam stamp.ve verisig risign.com/s om/script cripts/ s/time mestamp. stamp.dll ll • $(Plat latfo form) m)\$( $(Conf onfigu igura ration ionNam Name)\Engi ngine neAd Adap apter er.dll ll

Enable Auto-Sign

HCK T ools/Win10 HLK

http://msdn.microsoft.com/en-us/library/windows/hardware/dn613952(v=vs.85).aspx http://msdn.microsoft.com/en-us/library/windows/hardware/ff536448(v=vs.85).aspx http://msdn.microsoft.com/en-us/library/windows/hardware/dn613904(v=vs.85).aspx http://download.microsoft.com/download/F/3/5/F3536898-FF3C-4548-8418- 08D79555A0DB/Credential%20Provider%20Framework%20Changes%20in%20Windows%208.docx http://msdn.microsoft.com/en-us/library/windows/desktop/dd401509(v=vs.85).aspx http://msdn.microsoft.com/en-us/library/windows/hardware/dn614027(v=vs.85).aspx http://msdn.microsoft.com/en-us/library/windows/hardware/hh998458.aspx