SentryPoint^™
Security Suite

Biometrics-based security, such as fingerprint authentication, is proven to be both more secure and convenient than passwords, making fingerprint sensing an increasingly common -- and product-differentiating -- feature in smartphones, tablets and PCs. However, fingerprint authentication also raises security concerns that can best be addressed with protections purpose-built for biometrics. Synaptics helps ensure biometric data protection through the SentryPoint Security Suite of features and architectures that accommodate the full range of market needs.

Security Considerations

Transformation

This one-way conversion of biometric data into a proprietary template format prevents recreation, reverse-engineering or use for unintended purposes, thereby protecting the user from identity theft.

Cryptography

All biometric data is encrypted and digitally signed using strong 256-bit Advanced Encryption Standard and Transport Layer Security technologies to prevent eavesdropping, tampering or fraud.

Key Management

Hardware-generated, one-time encryption keys ensure that biometric data remains entirely within the host’s trusted execution environment, where it's available only to processes known as trustworthy.

Choice of Architecture

Match-on-Host

Affordable Protection for Any Device

Match-on-Host

The match and other biometric functions are performed by applications running in a Trusted Execution Environment on the host with the SentryPoint features applied in layers as needed to provide the desired level of security.

Match-in-Sensor

Isolating Data Protects It from Threats

Match-in-Sensor

The match and all other biometric functions are isolated and performed entirely within the fingerprint sensor system-on-a-chip, enabling SentryPoint to completely isolate user authentication from possible attacks by malware infecting the host device.