Member Avatar for S123S43

I am developing web based mess management application where i need to make attendence through finger print identifications , for this purpose i want to use my laptop HP Probook 4530s build in finger print reader as for development and testing purpose .... is it possible or not ?

  • 3 Contributors
  • 2 Replies
  • 357 Views
  • 15 Hours Discussion Span
  • Latest Post Latest Post by Member #120589

Dani AI

Generated

— short answer: you cannot let a PHP server or a plain web page directly read the laptop’s built‑in fingerprint sensor or extract the cryptographic key from it. Modern platform biometric systems (Windows Hello / the Windows Biometric Framework) keep enrollment profiles and private keys on the device; the biometric representation does not leave the device. (learn.microsoft.com)

That said, two practical approaches let you build an attendance workflow that uses the laptop reader for development and testing:

  • Use WebAuthn / passkeys (recommended). The browser talks to the platform authenticator (the fingerprint reader via the OS) and returns a cryptographic assertion your server verifies. The server gets a signed assertion (not the fingerprint) and can record attendance. This is cross‑browser, phishing‑resistant, and doesn’t require shipping raw biometric data. (developer.mozilla.org)

  • Use a vendor SDK + local agent. Install the fingerprint vendor’s SDK or an OS library on the development machine (examples: SecuGen / DigitalPersona SDKs, or libfprint on Linux), run a small local service that talks to the sensor, and have your page call that service (localhost). The local agent does capture/matching or creates a signed token the server trusts; never send raw images/templates to your server. This lets you test with built‑in hardware but requires drivers and an installation step on each client. (secugen.com)

Practical checklist before building:

  1. Decide WebAuthn (browser-based, no biometric data leaves device) or local agent (more control, needs drivers). 2) If using a local agent, have it produce signed assertions/tokens your PHP backend verifies. 3) Encrypt transport (HTTPS), store only what you need, and get user consent. 4) Check biometric/privacy law requirements (for example, Illinois BIPA) before storing or processing biometric identifiers. (ilga.gov)

Minimal conceptual flow (pseudo):

Browser -> (WebAuthn) -> Platform authenticator -> Server verifies assertion -> mark attendance
OR
Browser -> fetch('http://localhost:5000/scan') -> local agent + SDK -> returns {userId,timestamp,signature} -> Server verifies signature -> mark attendance

was right that the key and templates are protected locally; the important takeaway is to use cryptographic assertions (WebAuthn) or a trusted local bridge rather than trying to transmit raw biometric data.

Recommended Answers

All 2 Replies

Member Avatar for Isaac_4

Unfortunately no, a finger print reader actually works by storing a cryptographic key in it's on board memory, then decoding a given value using that key ONLY if the finger print is CLOSE to the stored finger print. There is no way to transmit a fingerprint (or the cryptographic key itself) over the internet.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.