AM5728: Fingerprint Support in Android SDK

Hi Devashish,

TI SDK does not have support for this.

There are various components that are needed for this feature which are not present in TI SDK.
(Fingerprint HAL, TEE components, etc..)

https://source.android.com/security/authentication/fingerprint-hal


Regards,
Vishal

Hi Vishal,

I understand that TI's AM5728 Android SDK does not have support for Fingerprint Authentication. May be that's why I won't get fingerprint option in Settings application in first place.

Please note that I had faced this problem while porting Camera and WiFi on AM5728 Android OS. TI's SDK did not have support for Camera and WiFi, but I was able to port it using the information you had provided.

I am expecting similar kind of heads up for Fingerprint device as well. Can you help me understand how should I proceed with porting of Fingerprint on TI Android PSDK?

Regards,

Devashish

This case is very different from Camera. For camera we had a working solution for reference on similar device and it was a standalone HAL.
Fingerprint feature is not part of any TI SDK and it is far more complicated than camera. This requires some security features as well (TEE , Keymaster, etc..)

Hi,

What are these security features TEE, keymaster ? Can you elaborate?

Is there any guide which I can refer to for these features?

Hi,

Android website has details
https://source.android.com/security/authentication/fingerprint-hal
https://source.android.com/security/keystore

For TEE there are multiple options,
There is one from Linaro - https://www.linaro.org/blog/op-tee-qa/, this may have a version for TI device, I will find out more info and share.
There is one provided by Google - https://source.android.com/security/trusty, but we don't have a port for TI device


Regards,
Vishal

Hi,

Thanks for your response.

Is TEE not supported in TI's AM5728 Android PSDK?

Is there any way to run Fingerprint authentication module outside of TEE?

One more thing - I'd also like to enable support for IPSec authentication in AM5728 Android SDK. Is TEE required for implementing IPSec support as well? I can see support for basic IPSec in VPN tab in Settings application. But I'd like to use my own proprietary algorithm for key-exchange in IPSec protocol. Is it possible? 

Regards,

Vishal

Hi,

I don't think Fingerprint HAL can be run without Keymaster/Keystore (these depend on TEE). This is out of scope of TI SDK.

For IPSec also please refer to Android documentation, I don't know the answer for implementing proprietary IPSec protocol.
https://source.android.com/devices/architecture/modular-system/ipsec


Regards,
Vishal

Hi,

Will the TEE component be supported in future versions of TI's Android SDK?

Also, what about Face Recognition authentication? Does it also require TEE to run?

Regards,

Devashish