tananaev / passport-reader

e-Passport NFC Reader Android app
348 stars 132 forks source link

Fingerprint? #23

Open frepe360 opened 4 years ago

frepe360 commented 4 years ago

Hi, I just tried your app and it worked exactly as expected.

Can you also read out the fingerprint it is (presumably) stored on the RFID chip?

frepe360 commented 4 years ago

I have looked around, and it appears that what is needed, is to read out PassportService.EF_DG3 much the same way as DG1 and DG2, and I guess that the image showing the fingerprint can be presented to the user like the passport photo is. There also appears to be some info as to which finger is shown, and so on.

I do not have an android dev environment set up, otherwise I would have tried this myself.

Do you think that maybe this is something you would consider to include in your app?

RomainL972 commented 4 years ago

On some passports, like France for example, you must perform Terminal Authentication to be able to access the fingerprints. However, to do this you must have a private key signed by the country's CSCA, so unless you are from the government, you can't access the fingerprints.

frepe360 commented 4 years ago

Ah, I see, I did not know that. Thank you for this information. What is "Terminal Authentication" and what does "CSCA" stand for?

In fact, I tried reading DG3 with another passport reading android app, and it managed to read all the DG's except that one, on which it said "Failed, could not read". I have a swedish passport.

RomainL972 commented 4 years ago

Terminal Authentication is a way for the reading device to prove to the passport that it comes from the government, using cryptography. CSCA means Country Signing Certificate Authority, they are the ones who electronically sign the passports and decide who gets access to the fingerprints. I believe all Europeans passports are protected the same way so you won't be able to access the fingerprints

akeilox commented 4 years ago

@frepe360 curious which other android app have you tried that attempted to read DG3 ?

frepe360 commented 4 years ago

@RomainL972 I see, this is valuable information, thank you.

@akeilox The app was called "eCLOWN by Jeroen van Beek".