summaryrefslogtreecommitdiffstats
path: root/biometrics
diff options
context:
space:
mode:
authorKevin Chyn <kchyn@google.com>2018-12-14 16:19:38 -0800
committerKevin Chyn <kchyn@google.com>2018-12-14 16:44:26 -0800
commit16d891dd3d6b2f3b6f8b7585df025a43a99c76ea (patch)
tree7a4fedc7d1dae20c926cb011242b5e8e00c0a370 /biometrics
parent6fe8120fbafe861708122f1eeabf964b928e58a0 (diff)
downloadandroid_hardware_interfaces-16d891dd3d6b2f3b6f8b7585df025a43a99c76ea.tar.gz
android_hardware_interfaces-16d891dd3d6b2f3b6f8b7585df025a43a99c76ea.tar.bz2
android_hardware_interfaces-16d891dd3d6b2f3b6f8b7585df025a43a99c76ea.zip
Move lockout to below the HAL
Fixes: 120630211 Test: builds Change-Id: I87ae317110d0ef6cf5b82afe6ee7724527f9f64e
Diffstat (limited to 'biometrics')
-rw-r--r--biometrics/face/1.0/IBiometricsFace.hal9
-rw-r--r--biometrics/face/1.0/types.hal10
2 files changed, 18 insertions, 1 deletions
diff --git a/biometrics/face/1.0/IBiometricsFace.hal b/biometrics/face/1.0/IBiometricsFace.hal
index ee67497ae..e3c256a2b 100644
--- a/biometrics/face/1.0/IBiometricsFace.hal
+++ b/biometrics/face/1.0/IBiometricsFace.hal
@@ -240,4 +240,13 @@ interface IBiometricsFace {
* @return status The status of this method call.
*/
userActivity() generates (Status status);
+
+ /**
+ * Reset lockout for the current user.
+ *
+ * @param hat A valid Hardware Authentication Token, generated when the
+ * user authenticates with Pin/Pattern/Pass.
+ * @return true if lockout was reset, false otherwise.
+ */
+ resetLockout(vec<uint8_t> hat) generates (bool success);
};
diff --git a/biometrics/face/1.0/types.hal b/biometrics/face/1.0/types.hal
index 1ec5b74be..a488d671d 100644
--- a/biometrics/face/1.0/types.hal
+++ b/biometrics/face/1.0/types.hal
@@ -121,13 +121,21 @@ enum FaceError : int32_t {
/**
* Face authentication is locked out due to too many unsuccessful attempts.
+ * This is a "soft" lockout, and authentication can be restarted after
+ * a period of time, generally on the order of 30 seconds.
*/
LOCKOUT = 7,
/**
* Used to enable a vendor-specific error message.
*/
- VENDOR = 8
+ VENDOR = 8,
+
+ /**
+ * Face authentication is disabled until the user unlocks with strong
+ * authentication (PIN/Pattern/Password).
+ */
+ LOCKOUT_PERMANENT = 9
};
/**