Users should be able to use Fingerprint readers for authenticating themselves, using the BioAPI framework, for example for login or sudo. When not being used for login or sudo functions, the fingerprint reader should send scroll signals.

Status of Implementation

A BioAPI library implementation is available from Michael R. Crusoe's homepage, which also has a BioAPI PAM module.

The UPEK TouchChip (shipped with ThinkPads) offers a binary kernel module.

Gerard Klaver is working on a driver for Authentec fingerprint readers, see his page. When Authentec was contacted in January of 2006, they also stated that they were working on a linux driver, to be released within six months.

Thanks to Andreas Grotz, the Authentec 2501 now has a working GPL driver that I could use to capture my fingerprint, see this. It would be great if this could be integrated in Edgy+1.

Clemens Schulz is also working on a driver, that was/will be(?) available here. See also this blog entry by Reinhard Tartler.

There is a project on gna working on the aes2501 here.

What about fprint? it already handles various fingerprint sensors and supports identification. Also, it seems easier than bioapi.

Status of Distribution Support

Debian packages for the BioAPI library are available from Michael R. Crusoe's homepage. The PAM module and the TouchChip drivers have not been packaged yet, various pages (ThinkWiki, provide information on additional setup steps.

Plan of Action

I just finished creating Ubuntu packages for pam-bioapi and the upek BSP (Biometric Service Provider). They work with the bioapi 1.2.3 debian package from upstream. This is how I'd like to proceed for this:


Potential security risks

As Ubuntu should provide a secure user experience, it show inform users about the potential risks of using a finger print:

So finger prints should not be used on machines, that should be protected against illegal access. (Since the finger print is normally "stored" all over the keyboard).

US Export Rules

US Export Rules might come into play here. Basically, some parts might not be exportable from the United States. Read more at


FingerprintAuthentication (last edited 2009-11-07 03:59:16 by 118)