Android - Where and how securely is fingerprint information stored in a device

前端 未结 1 1419
温柔的废话
温柔的废话 2020-12-28 22:50

I have been reading quite a bit about fingerprint sensors and their growing presence in smart phones. I understand that at the basic level, there is a digital image that get

相关标签:
1条回答
  • 2020-12-28 23:04

    Trusted Execution Environment (TEE)

    Google has made a noteworthy step in the right direction by moving all print data manipulation to the Trusted Execution Environment (TEE) and providing strict guidelines for fingerprint data storage that manufacturers must follow.

    • All fingerprint data manipulation is performed within TEE

    • All fingerprint data must be secured within sensor hardware or trusted memory so that images of your fingerprint are inaccessible

    • Fingerprint data can be stored on the file system only in encrypted form,
      regardless of whether the file system itself is encrypted or not

    • Removal of the user must result in removal of the user's existing fingerprint data

    • Root access must not compromise fingerprint data

    Data Source infinum.co

    0 讨论(0)
提交回复
热议问题