Android-指纹信息在设备中的存储位置和存储方式 [英] Android - Where and how securely is fingerprint information stored in a device

问题描述

我已经阅读了很多有关指纹传感器及其在智能手机中的应用。我了解在基本级别上有一个注册的数字图像，它用作身份验证的模板。我了解与指纹相关的处理是在受信任的执行环境中进行的。但是，我想知道模板的保存位置以及保存格式。

I have been reading quite a bit about fingerprint sensors and their growing presence in smart phones. I understand that at the basic level, there is a digital image that gets registered and it serves as a template for authentication. I understand that fingerprint related processing takes place in a Trusted Execution Environment. However, I would like to know where the "template" gets saved and in what format?

推荐答案

受信任的执行环境（TEE）

Trusted Execution Environment (TEE)

Google通过将所有打印数据操作移至可信执行环境（TEE）并为制造商必须遵循的指纹数据存储提供了严格的指导方针，朝着正确的方向迈出了重要的一步。

Google has made a noteworthy step in the right direction by moving all print data manipulation to the Trusted Execution Environment (TEE) and providing strict guidelines for fingerprint data storage that manufacturers must follow.

• 所有指纹数据操作都在TEE中执行

• All fingerprint data manipulation is performed within TEE

所有指纹数据必须在传感器硬件或受信任的内存中进行保护，以使指纹图像不可访问

All fingerprint data must be secured within sensor hardware or trusted memory so that images of your fingerprint are inaccessible

指纹数据只能存储在文件系统中加密形式，

，无论文件系统本身是否已加密

Fingerprint data can be stored on the file system only in encrypted form,
regardless of whether the file system itself is encrypted or not

删除用户必须导致删除用户的现有指纹数据

Removal of the user must result in removal of the user's existing fingerprint data

root用户访问权限一定不能破坏指纹数据

Root access must not compromise fingerprint data

数据源 infinum.co

这篇关于Android-指纹信息在设备中的存储位置和存储方式的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！