php web 应用的指纹认证
声明：本页面是StackOverFlow热门问题的中英对照翻译，遵循CC BY-SA 4.0协议，如果您需要使用它，必须同样遵循CC BY-SA许可，注明原文地址和作者信息，同时你必须将它归于原作者（不是我）：StackOverFlow
原文地址: http://stackoverflow.com/questions/3498945/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me):
StackOverFlow
Fingerprint authentication for php web app
提问by Alex Pi
I need to implement authentication in a php app but using fingerprint as part of credentials.
我需要在 php 应用程序中实现身份验证，但使用指纹作为凭据的一部分。
So, sincerely I'm kind of lost here.
所以，说真的，我有点迷失在这里。
1) Do I need a product (reader) with javascript SDK? I've seen some using ActiveX but obviously this will work just for IE. I would like a cross-browser solution here.
1) 我需要一个带有 javascript SDK 的产品（阅读器）吗？我见过一些使用 ActiveX，但显然这仅适用于 IE。我想要一个跨浏览器的解决方案。
2) On server side, I suppose I'll natively call some C/C++/Java libs from my php code. Is it right?
2) 在服务器端，我想我会从我的 php 代码中调用一些 C/C++/Java 库。这样对吗？
As you can see, any paper/orientation you could give me would be appreciated.
如您所见，您能给我的任何论文/方向都将不胜感激。
回答by buley
Jaison, "you cannot do it" and "PHP" don't belong in the same sentence.
Jaison，“你不能做到”和“PHP”不属于同一个句子。
Berserkpi, you cando this in PHP, but only parts of it. I don't know about the hardware but I can generalize the parameters of your project.
Berserkpi，您可以在 PHP 中执行此操作，但只能使用其中的一部分。我不了解硬件，但我可以概括您项目的参数。
Fingerprinting is going to have to be done on some sort of client machine. That means a fingerprint-reading device hooked up to something like a computer, probably through a USB or other serial connection.
指纹识别必须在某种客户端机器上完成。这意味着指纹读取设备可能通过 USB 或其他串行连接连接到计算机之类的设备上。
I can't tell you how that fingerprinting is going to work, but you'll need to get a program running on the machine that submits your fingerprints for authentication. Those fingerprints are going to be sent to a server, probably through a POST request and a PHP API you've set up. This is going to be the toughest part.
我无法告诉您指纹识别将如何工作，但是您需要在提交指纹以进行身份验证的机器上运行一个程序。这些指纹可能会通过 POST 请求和您设置的 PHP API 发送到服务器。这将是最艰难的部分。
The tough part is that you need those prints to be consistant -- w/web apps you don't get in with a password that kinds of looks like your password; either the user can be authenticated or the password is rejected. With fingerprints that may not be the case.
困难的部分是您需要这些打印件保持一致——使用网络应用程序，您不会使用看起来像您的密码的密码；要么可以验证用户身份，要么拒绝密码。用指纹可能不是这样。
Whatever it is, so long as it's consistant you can consider it more or less like an MD5 hash. You match it against a hashed version you store in your database and if it matches you authenticate her by generating a token (maybe another MD5) hash that is good for an hour or so.
不管它是什么，只要它是一致的，您就可以或多或少地将其视为 MD5 哈希。您将它与存储在数据库中的散列版本进行匹配，如果匹配，则通过生成一个大约一个小时的令牌（可能是另一个 MD5）散列来验证她的身份。
回答by Stephen
we made a small app using c# to handle fingerprint scanning and converted the output to binary file. theoretically it shd be compared with wats available on the server and returns a result which determines if the user gets authenticated or not.
我们使用 c# 制作了一个小应用程序来处理指纹扫描并将输出转换为二进制文件。从理论上讲，它会与服务器上可用的 wats 进行比较，并返回一个确定用户是否通过身份验证的结果。
another method is to use a windows app that works with the fingerprint hardware and posses a simple web browser.
另一种方法是使用可与指纹硬件配合使用并具有简单网络浏览器的 Windows 应用程序。
once the user gets authenticated it will call a url with and arg that only the coder knows.
一旦用户通过身份验证，它将调用一个只有编码器知道的 url 和 arg。
回答by Sizzling Code
i have came across a library, php_zklibit does seem to work with biometric devices. But Problem is there is no documentation of it over the internet.. I have seen someone Using Fingerprint device for attendance using this library.
我遇到了一个库php_zklib它似乎可以与生物识别设备一起使用。但问题是互联网上没有关于它的文档。我见过有人使用指纹设备使用这个库进行出勤。
回答by Mohammad Shahnewaz
Look at here. They have Java, PHP, web app aupported SDK and hardware for biometric authentication.
看这里。他们有 Java、PHP、Web 应用程序支持的 SDK 和用于生物识别身份验证的硬件。
回答by Jaison Justus
You cannot do this using PHP - it's a scripting language.
您不能使用 PHP 来执行此操作 - 它是一种脚本语言。
However, you can use .NET technologies like C# or VB for hardware porting.
但是，您可以使用 C# 或 VB 等 .NET 技术进行硬件移植。
My idea:
我的点子：
Handle authentication using .NET technologies.
Pass the authentication result to PHP using ASP like embedding result in XML/JSON
使用 .NET 技术处理身份验证。
使用 ASP 将身份验证结果传递给 PHP，就像在 XML/JSON 中嵌入结果一样
I don't know how much success rate you will get from this solution, but it's worth a try.
我不知道你会从这个解决方案中获得多少成功率，但值得一试。
