blocks|key|3562531|text|不支持直接“检测注销”。即使是这样，也于事无补。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3562532|由设备秘密指纹或其他保护的tldr;访问不能用于保证“拥有”设备的人在场。数据治理条例(EULA、公司/宿舍政策等)。并且信任用户遵守这样的，包括报告违规，这允许设备对人的断言。|offset|length|style|BOLD|3562533|在移动设备上，指纹认证实际上是每个设备的秘密，比可以接受任何用于保护其他访问/机密的注册指纹。|3562534|考虑：|3562535|应用程序无法直接访问|3562536|指纹，因此不能将其用作“用户ID”。|unordered-list-item|3562537|3562538|每个设备使用一个私有的每个设备密钥来加密和存储指纹信息.此信息无法从外部访问，也无法上载。|3562539|参见iOS的“安全飞地”和安卓的“可信的执行环境”。|3562540|每个设备都可以注册多个指纹。这意味着可以添加来自不同人的多个指纹，并且无法确定差异。同样，一个人可以在多个设备上为一个不同的手指注册指纹。|3562541|
|3562542|指纹编码是一种“单向”数据建模，它接受指纹注册。实际的指纹数据会有所不同，甚至在安全保存之前:只有将该模型应用到正在应用的指纹模式上才是有用的。|3562543|3562544|3562545|现在，如果有一个物理控制的设备/系统。|3562546|物理控制系统的一个例子可能是使用固定终端来控制单人进出门(带有安全摄像机和/或物理警卫)，在这种情况下，人们只能在经过适当的身份验证后才能在受信任的人面前注册指纹。这到底有多重要？当一个人爬进窗户时会发生什么呢？|3562547|让该应用程序从一个实时摄像头上取出一个详细的面部/眼睛扫描，并将其发送到受控服务器进行一些基于生物特征的内部验证，这可能是一些严厉的中途步骤。我会说“不谢谢”;-)|3562548|entityMap^0|0|D|5|0|K|L|1A|1|0|0|3|0|0|A|0|0|I|0|0|0|19|0|0|Q|0|0|1X|0|0|0|20|0|0|0|0|J|0|0|2Y|0|0|2A|0^^$0|@$1|2|3|4|5|6|7|1B|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1C|8|@$D|1D|E|1E|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|1F|8|@$D|1G|E|1H|F|G]|$D|1I|E|1J|F|G]]|9|@]|A|$]]|$1|J|3|K|5|6|7|1K|8|@$D|1L|E|1M|F|G]]|9|@]|A|$]]|$1|L|3|M|5|6|7|1N|8|@$D|1O|E|1P|F|G]]|9|@]|A|$]]|$1|N|3|O|5|P|7|1Q|8|@$D|1R|E|1S|F|G]]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|1T|8|@]|9|@]|A|$]]|$1|R|3|S|5|6|7|1U|8|@$D|1V|E|1W|F|G]]|9|@]|A|$]]|$1|T|3|U|5|6|7|1X|8|@$D|1Y|E|1Z|F|G]]|9|@]|A|$]]|$1|V|3|W|5|P|7|20|8|@$D|21|E|22|F|G]]|9|@]|A|$]]|$1|X|3|Y|5|6|7|23|8|@]|9|@]|A|$]]|$1|Z|3|10|5|P|7|24|8|@$D|25|E|26|F|G]]|9|@]|A|$]]|$1|11|3|-4|5|6|7|27|8|@]|9|@]|A|$]]|$1|12|3|-4|5|6|7|28|8|@]|9|@]|A|$]]|$1|13|3|14|5|6|7|29|8|@$D|2A|E|2B|F|G]]|9|@]|A|$]]|$1|15|3|16|5|6|7|2C|8|@$D|2D|E|2E|F|G]]|9|@]|A|$]]|$1|17|3|18|5|6|7|2F|8|@$D|2G|E|2H|F|G]]|9|@]|A|$]]|$1|19|3|-4|5|6|7|2I|8|@]|9|@]|A|$]]]|1A|$]]

There is no support for "detecting de-registration" directly. Even if it were, it would not be useful.

tldr; Access, guarded by a device-secret fingerprint or otherwise, from an arbitrary and uncontrolled device cannot be used to guarantee that the person who 'owns' the device is present. It is the data governance regulations (EULA, company/dorm policy, etc.) and trust in the user to adhere to such, including reporting violations, which allows the device-to-person assertion.

On a mobile device, fingerprint authentication is effectively a per-device secret than can accept any of the registered fingerprints which is used to protect other access/secrets.

Consider:

<ul>
<li>Fingerprints are not accessible directly by applications and thus cannot be used as "user IDs".

Each device uses a private per-device key to encrypt and store the fingerprint information. This information is not accessible externally nor is it uploaded.

See 'Secure Enclave' for iOS and 'Trusted Execution Environment' for Android.</li>
<li>A person can have multiple fingerprints registered per device. This implies that multiple fingerprints from different people can be added and there is no way to determine the difference. Likewise, a person could register a fingerprint for a different finger on multiple devices.</li>
<li>The encoding of a fingerprint is a "one way" data modeling that accepts the fingerprint as registered. The actual fingerprint data will differ, even before it's securely saved: it is only the application of this model onto the fingerprint pattern being applied that is useful.</li>
</ul>

<hr>

Now, if there was a physically controlled device / system ..

An example of a physically controlled system might be usages of fixed terminals controlling single-person entry/exit doors (with security cameras and/or a physical guard) where people can only register a fingerprint in front of a trusted person after appropriate ID verification.. how much does it really matter? And what happens when a person climbs through a window?

Having the app take a detailed face / eye scan off a live camera and sending it in to a controlled server for some internal biometric-based verification might be some [draconian] half-way step .. I'd say "No Thanks" ;-)

blocks|key|1056024|text|在iOS上，如果某物受到指纹或faceID的保护，开发人员可以设置一个选项，即只有在注册指纹/人脸集不变的情况下才能访问数据。所以你可以发送一个一次性的代码，用户放入他们的密钥链，如果更改注册指纹，它消失了。如果我登记了我自己和我三个最好的伙伴的指纹，你不会发现的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1056025|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

On iOS, if something is protected by fingerprint or faceID, the developer can set an option that the data can only be accessed if the set of registered fingerprints/ faces is unchanged. So you could send a one-time code that the user puts in their keychain, and if the change registered fingerprints, it’s gone. Now if I registered fingerprints of myself and my three best mates, you can’t detect that.

I'm a beginner to Flutter and programming in general.

First I'd like to know if it's possible to notify the creator of an app or it's back end service that a fingerprint has been deregistered and a new one added.

Note: The objective is not to get fingerprint data but to uniquely identify people in one way or the other. For example assuming an app would like to manage dormitories that have a closing time of say 9 pm and intends to generate a report of everyone present inside by using their device location and a service on a local network that checks location data and asks for a fingerprint authentication, there's every possibility that users could leave their devices to other users and register their fingerprints as well allowing them to provide authentication and creating inaccurate reports for the dormitory.

Please any suggestions for the above situation?

Is there a way an app can be notified that a fingerprint from a device has been deregistered?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

总的来说，我是个初学者，对编程很感兴趣。首先，我想知道是否有可能通知应用程序的创建者，或者它的后端服务，一个指纹已被取消注册，并增加了一个新的指纹。Note：目的不是为了获取指纹数据，而是以某种方式唯一地识别人。例如，假设应用程序希望管理关闭时间为晚上9点的宿舍，并打算通过使用设备位置和本地网络上的一项检查位置数据并要...

问有没有办法通知一个应用程序，一个设备的指纹已经被注销了？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问有没有办法通知一个应用程序，一个设备的指纹已经被注销了？EN