I wonder dose one secure connect have a timeliness? about securedeviceconnectionprotocol

[mamckee]

The timeout is not due to the SDCP. Enrollment for secure biometrics times out after 5 minutes from entering PIN. The timeout is to help ensure only the authorized user is enrolling their biometrics.

[mamckee]

Yes, in the secure bio case, the timeout guarantees that biometrics were enrolled within a reasonable time from entering PIN. In the normal bio case, this guarantee cannot be made. The secure biometric enrollments are cryptographically tied to the user's PIN, while normal biometrics are not. Even though the settings flow requires the user's PIN, enrollments can still be added to the template database without PIN. The user's PIN is only required to enable biometrics as a sign in option when they enroll the first time.

[mamckee]

I'm not aware of any documentation with this behavior yet, but this should be documented. Thanks for helping surface this!

[FengJungle]

The timeout is not due to the SDCP. Enrollment for secure biometrics times out after 5 minutes from entering PIN. The timeout is to help ensure only the authorized user is enrolling their biometrics.

Hi, thanks for your kindly reply.
But when I disable VBS, during enrollment, I pause for over 5 minutes, even 8min, but I can finish enrollment successfully. This is different from the behaviors in VBS.

[FengJungle]

Yes, in the secure bio case, the timeout guarantees that biometrics were enrolled within a reasonable time from entering PIN. In the normal bio case, this guarantee cannot be made. The secure biometric enrollments are cryptographically tied to the user's PIN, while normal biometrics are not. Even though the settings flow requires the user's PIN, enrollments can still be added to the template database without PIN. The user's PIN is only required to enable biometrics as a sign in option when they enroll the first time.

Hi mamckee, got it! Thanks for your timely reply and detailed explanation.
And one more question, I wonder is there a document or website describing this mechanism?
Thanks a lot!

[FengJungle]

I'm not aware of any documentation with this behavior yet, but this should be documented. Thanks for helping surface this!

Received.
Thank you!