Windows 10 Fingerprint Introduction and Implementation

Yifeng ZhengSoftware Engineer

Identification

Fingerprint

Whats Biometrics

Biometrics Advantages

Biometrics Usage

Biometric Identification

Gathering and

Quantizing

Feature

Extracting

Comparing

and Matching

Gathering and

Quantizing

Feature

Extracting

Template

StoringEnrollment

Identification

FAR(False Accept Rate) - Uniqueness

FRR(False Reject Rate) - Reliability

Biometrics Key-points

Windows Biometric Framework Architecture

Windows Biometric Framework Core Platform

Biometric Device based on USB

Develop a credential provider for logon (provided by OS from Win8)

Develop a FMA to enhance the management (provided by OS from Win8)

Notice:

Win7 FMA using different working flow as Win8 or later, once developing the FMA/Driver/Adapters on Win7, they must be based-on Win7 WDK and instructions

Support WBF Fingerprint Devices what needs to be done

Notice: For fingerprint biometric devices that do not have on-chip storage or matching capabilities, Microsoft provides inbox sensor

and storage adapters components. An IHV or ISV must supply the engine adapter component for these devices.

For fingerprint biometric devices that do support on-chip matching and storage, the IHV or ISV must supply all BU adapter components.

Windows In-box Components

WDK Supports

Two Types

Ten Positions

Two Standards - NISTIR 6529-A & ANSI-INCITS-381-2004

One Sample

WBDI Driver INF

WBDI Driver

IOCTL Codes

WBIO_CAPTURE_DATA & WINBIO_DATA

WINBIO_BIR & WINBIO_BIR_DATA

WINBIO_BIR_HEADER & WINBIO_REGISTERED_FORMAT

WINBIO_BDB_ANSI_381_HEADER

WINBIO_BDB_ANSI_381_RECORD

Role of Engine Adapter

Expose the WbioQueryEngineInterface external function

WINBIO_ENGINE_INTERFACE

Enrollment Example

Identification Example

/integritycheck

Enable Integrity Check

Add the following command into Project->Properties->Build Events->Post-Build Event->Command Line

Signtool sign /v /ph /s PrivateCertStore /n WBFTest.com(Test) /t http://timestamp.verisign.com/scripts/timestamp.dll $(Platform)\$(ConfigurationName)\EngineAdapter.dll

Test Sign

Enable Auto-Sign

HCK Tools/Win10 HLK

http://msdn.microsoft.com/en-us/library/windows/hardware/dn613952(v=vs.85).aspx

http://msdn.microsoft.com/en-us/library/windows/hardware/ff536448(v=vs.85).aspx

http://msdn.microsoft.com/en-us/library/windows/hardware/dn613904(v=vs.85).aspx

http://download.microsoft.com/download/F/3/5/F3536898-FF3C-4548-8418-08D79555A0DB/Credential%20Provider%20Framework%20Changes%20in%20Windows%208.docx

http://msdn.microsoft.com/en-us/library/windows/desktop/dd401509(v=vs.85).aspx

http://msdn.microsoft.com/en-us/library/windows/hardware/dn614027(v=vs.85).aspx

http://msdn.microsoft.com/en-us/library/windows/hardware/hh998458.aspx

http://msdn.microsoft.com/en-us/library/windows/hardware/dn613952(v=vs.85).aspxhttp://msdn.microsoft.com/en-us/library/windows/hardware/ff536448(v=vs.85).aspxhttp://msdn.microsoft.com/en-us/library/windows/hardware/dn613904(v=vs.85).aspxhttp://download.microsoft.com/download/F/3/5/F3536898-FF3C-4548-8418-08D79555A0DB/Credential Provider Framework Changes in Windows 8.docxhttp://msdn.microsoft.com/en-us/library/windows/desktop/dd401509(v=vs.85).aspxhttp://msdn.microsoft.com/en-us/library/windows/hardware/dn614027(v=vs.85).aspxhttp://msdn.microsoft.com/en-us/library/windows/hardware/hh998458.aspx