passport-reader icon indicating copy to clipboard operation
passport-reader copied to clipboard

Fingerprint?

Open frepe360 opened this issue 5 years ago • 6 comments

Hi, I just tried your app and it worked exactly as expected.

Can you also read out the fingerprint it is (presumably) stored on the RFID chip?

frepe360 avatar May 22 '20 08:05 frepe360

I have looked around, and it appears that what is needed, is to read out PassportService.EF_DG3 much the same way as DG1 and DG2, and I guess that the image showing the fingerprint can be presented to the user like the passport photo is. There also appears to be some info as to which finger is shown, and so on.

I do not have an android dev environment set up, otherwise I would have tried this myself.

Do you think that maybe this is something you would consider to include in your app?

frepe360 avatar May 22 '20 10:05 frepe360

On some passports, like France for example, you must perform Terminal Authentication to be able to access the fingerprints. However, to do this you must have a private key signed by the country's CSCA, so unless you are from the government, you can't access the fingerprints.

RomainL972 avatar May 23 '20 20:05 RomainL972

Ah, I see, I did not know that. Thank you for this information. What is "Terminal Authentication" and what does "CSCA" stand for?

In fact, I tried reading DG3 with another passport reading android app, and it managed to read all the DG's except that one, on which it said "Failed, could not read". I have a swedish passport.

frepe360 avatar May 23 '20 23:05 frepe360

Terminal Authentication is a way for the reading device to prove to the passport that it comes from the government, using cryptography. CSCA means Country Signing Certificate Authority, they are the ones who electronically sign the passports and decide who gets access to the fingerprints. I believe all Europeans passports are protected the same way so you won't be able to access the fingerprints

RomainL972 avatar May 23 '20 23:05 RomainL972

@frepe360 curious which other android app have you tried that attempted to read DG3 ?

akeilox avatar May 24 '20 03:05 akeilox

@RomainL972 I see, this is valuable information, thank you.

@akeilox The app was called "eCLOWN by Jeroen van Beek".

frepe360 avatar May 24 '20 05:05 frepe360