FIDO2 in Android support Face Recognition for authentication?

[Yogesh Joshi]

Hello Everyone,

We have implemented FIDO2 for Android and is working fine with Biometric, PIN, Pattern but don't get an option for Facial Recognition for registration & authentication.

Thanks

Yogesh Joshi

[Kalyan Tirunagari]

Hi All,

Can someone let us know if Facial recognition is part of FIDO2 authentication in Android?

Regards,

Kalyan

[Arshad Noor]

Kalyan,

The use of a biometric template within the FIDO protocols for User
Verification is only limited to device-level authentication - the
template is never transported to the FIDO server. As a result, it is up
to the device manufacturer to decide whether to choose to incorporate
biometrics and if so, which biometric templates to support.

If you have FIDO2 working for Android with fingerprint, PIN and Pattern,
then it is because the BiometricPrompt API provided by Android has
chosen to support just those capabilities for UV. You should engage with
the Android community to understand how Facial Recognition is
incorporated into BiometricPrompt (if it is incorporated into it at all).

Try reaching the people at Google who've written these blogs - they
should be able to provide more information:

https://android-developers.googleblog.com/2018/06/better-biometrics-in-android-p.html
https://medium.com/androiddevelopers/using-biometricprompt-with-cryptoobject-how-and-why-aace500ccdb7

Arshad Noor
StrongKey

On 1/31/21 10:41 PM, Kalyan Tirunagari wrote:
>
> Hi All,
>
> Can someone let us know if Facial recognition is part of FIDO2
> authentication in Android?
>
> Regards,
> Kalyan
> On Wednesday, 27 January 2021 at 11:54:04 UTC+5:30 yajo...@gmail.com wrote:
>
> Hello Everyone,
>
> We have implemented FIDO2 for Android and is working fine with

> *Biometric, PIN, Pattern but don't* *get an option forFacial
> Recognition for registration & authentication*.
>
>
> Thanks
> Yogesh Joshi
>
> --
> You received this message because you are subscribed to the Google
> Groups "FIDO Dev (fido-dev)" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to fido-dev+u...@fidoalliance.org
> <mailto:fido-dev+u...@fidoalliance.org>.
> To view this discussion on the web visit
> https://groups.google.com/a/fidoalliance.org/d/msgid/fido-dev/891eaccb-b44b-4863-a49d-8b4556b23cd8n%40fidoalliance.org
> <https://groups.google.com/a/fidoalliance.org/d/msgid/fido-dev/891eaccb-b44b-4863-a49d-8b4556b23cd8n%40fidoalliance.org?utm_medium=email&utm_source=footer>.

[Yogesh Joshi]

We are able to get Face ID prompt from FIDO Internal Authenticator and when we scan User Face after successful verification we are getting  the following error 

if (data.hasExtra(Fido.FIDO2_KEY_ERROR_EXTRA)) {

    Log.d(Constants.TAG, "Received error response from Google Play Services FIDO2 API");

    AuthenticatorErrorResponse response =

            AuthenticatorErrorResponse.deserializeFromBytes(

                    Objects.requireNonNull(data.getByteArrayExtra(Fido.FIDO2_KEY_ERROR_EXTRA)));

    Log.e(Constants.TAG, "Error Message :"+response.getErrorMessage()+" Error Code : "+response.getErrorCode());

}

Error Message: Something went wrong during registration 

Error Code: UNKNOWN_ERR 

But, when we fall back and do PIN authentication from Face ID Prompt then registration and authentication work just fine.

Face ID Prompt

Error after scanning Face

any help in this regard is highly appreciated.

Thanks

Yogesh

[Tim Cappalli]

You mention Face ID but your screenshots are Android. Which one are you testing?

---

From: fido...@fidoalliance.org <fido...@fidoalliance.org> on behalf of Yogesh Joshi <yajo...@gmail.com>
Sent: Friday, February 5, 2021 4:51:59 AM
To: FIDO Dev (fido-dev) <fido...@fidoalliance.org>
Cc: Arshad Noor <arsha...@strongkey.com>
Subject: Re: [FIDO-DEV] Re: FIDO2 in Android support Face Recognition for authentication?

 

To unsubscribe from this group and stop receiving emails from it, send an email to fido-dev+u...@fidoalliance.org.
To view this discussion on the web visit https://groups.google.com/a/fidoalliance.org/d/msgid/fido-dev/ec97943c-7261-4e0d-986d-03bfd8bf9541n%40fidoalliance.org.

[Yogesh Joshi]

Hi Tim,

It's android which we are testing and it's Face Authentication through Biometric Prompt in android. 

Thanks

Yogesh

[Arshad Noor]

Wish I could help, Yogesh, but you might consider checking out https://stackoverflow.com/questions/tagged/android-biometric to see if there are any hints to the problem there.

Arshad Noor
StrongKey

[My1]

@Yogesh may I ask what device you are using? on an xcover pro from Samsung I only get allowed fingerprint and if I only have the face in as biometric lock without fingerprints, it falls back the the normal pin/password/pattern to do FIDO stuff.

Regards