Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fingerprint? #23

Open
frepe360 opened this issue May 22, 2020 · 6 comments
Open

Fingerprint? #23

frepe360 opened this issue May 22, 2020 · 6 comments

Comments

@frepe360
Copy link

Hi, I just tried your app and it worked exactly as expected.

Can you also read out the fingerprint it is (presumably) stored on the RFID chip?

@frepe360
Copy link
Author

I have looked around, and it appears that what is needed, is to read out PassportService.EF_DG3 much the same way as DG1 and DG2, and I guess that the image showing the fingerprint can be presented to the user like the passport photo is. There also appears to be some info as to which finger is shown, and so on.

I do not have an android dev environment set up, otherwise I would have tried this myself.

Do you think that maybe this is something you would consider to include in your app?

@RomainL972
Copy link
Contributor

On some passports, like France for example, you must perform Terminal Authentication to be able to access the fingerprints. However, to do this you must have a private key signed by the country's CSCA, so unless you are from the government, you can't access the fingerprints.

@frepe360
Copy link
Author

Ah, I see, I did not know that. Thank you for this information. What is "Terminal Authentication" and what does "CSCA" stand for?

In fact, I tried reading DG3 with another passport reading android app, and it managed to read all the DG's except that one, on which it said "Failed, could not read". I have a swedish passport.

@RomainL972
Copy link
Contributor

Terminal Authentication is a way for the reading device to prove to the passport that it comes from the government, using cryptography. CSCA means Country Signing Certificate Authority, they are the ones who electronically sign the passports and decide who gets access to the fingerprints. I believe all Europeans passports are protected the same way so you won't be able to access the fingerprints

@akeilox
Copy link

akeilox commented May 24, 2020

@frepe360 curious which other android app have you tried that attempted to read DG3 ?

@frepe360
Copy link
Author

@RomainL972 I see, this is valuable information, thank you.

@akeilox The app was called "eCLOWN by Jeroen van Beek".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants