Windows logon by fingerprint

pts.
Tags:
Application security
Biometrics
Database
Desktops
Development
Digital certificates
Encryption
Identity & Access Management
Instant Messaging
Management
Microsoft Exchange
Microsoft Windows
OS
provisioning
Secure Coding
Security
Security tokens
Servers
Single sign-on
SQL Server
I would like to tighten desktop security by replacing/renforcing the login passwords with fingerprints. The userID must be matched to the user's fingerprint for logon authentication. My USB fingerprint scanner already has software that enrolls, verifies and stores fingerprints in a database in the form of templates. So my challenge is that I have to personnalize/replace the Windows 2000 logon prompt to suit my fingerprint login needs. I don't know where to start. Should I use login scripts? Should I change the registry?? Any suggestions/ideas in this regard would be much appreciated.

Answer Wiki

Thanks. We'll let you know when a new response is added.

I don’t know a lot about this issue in particular but I figure that unless your finger print reader is capable of hooking into the same framework that smartcards use you’re probably going to find it difficult if not impossible to accomplish. I’m also fairly sure that there’s no magic registry hack or logon script way to perform authentication. The only thing I can suggest in terms of investigating further is to look at how RSA, et al. hook into Windows authentication.

If you do investigate further I’m interested in hearing the results. If you don’t mind can you please send me a follow up if proceed?

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • BeerMaker
    A quick google search found this one that seems to promise everything you are looking for. Price was in the 100-200 dollar range. I am interested in this too. Can you provide more info about the make and model number of your device. If you investigate this link below, let me know what you think. NOTE: I have never tried, nor do I recommend the following device. If anyone has info on this vendor please share with us. http://www.zvetcobiometrics.com/products/fingertouchSecurity.asp
    0 pointsBadges:
    report
  • DBZinGermany
    I like fingerprint as security, allows one to do away with passwords - which can be forgotten or learned by others; fingerprints are a little harder to steal. but one should balance the complexity (and cost) required for fingerprint sign-on against the need for such security. remember, you are looking at the cost of the software AND the cost of a 'reader' AT EACH work-station. READ: IT Budget. (I won't even get into the headaches involved when you lose your database). Also, consideration should be given to 1) allow any user to sign on to any workstation and 2) though this may seem inconvienient, if you really have something (READ: very valuable) that needs to be secure either have your system periodically re-require the fingerprint-id, regardless (actually especially) of activity on the workstation. you might give thought to using the fingerprint sign-on to allow individuals physical access to rooms/offices instead of the workstations. one problem with workstation access is when a user steps away from the workstation without signing off, thus allowing someone else access to the workstation. Fingerprint-id works, but it is expensive.
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following