I'm currently doing a web based system for multiple organizations, so on my login form, there's 3 simple field:
- Company code, such as CNN (this is implemented so we can have same username, as long as they work in different company)
- Username, such as James
Now we are actually studying on the fingerprint authentication technology, on how it could help above.
Our assumption is below:
- On our app, we provide a user registration screen, instead of username/password, they tap their thumb on the form, so we can get something, maybe a lengthy random string, which represents the thumbprint, then we pass this code to server, along with his profile, and registration completes.
- Above repeats for thousands of our other users.
- A user came to our app login screen, we show them a scanner, they put their thumbs on it, we send the retrieved fingerprint code, and send to server for a matching comparison, then we authenticate this user.
But from what we studied, it seems that the fingerprint SDK doesn't works this way. It simply authenticate if the user is the owner of the phone and it does not provide us a code or something to represents the fingerprint.
Can anyone with experience in developing a working/deployed fingerprint app, share with me how does fingerprint helps in authenticating your user?