A Secure Fingerprint-Based Examination Attendance Management System for Tertiary Institutions: Design, Implementation, and Technical Evaluation
Author
Temitayo Oyebamiji Morakinyo, Akeem Rotimi Gbopa, Sikiru Olanrewaju Kilani and Abiodun Sunday Olowookere
Abstract
Examination impersonation, proxy attendance, inefficient manual verification, and weak attendance traceability remain operational challenges for tertiary institutions. Although fingerprint biometrics can strengthen identity verification, a successful biometric comparison alone does not establish eligibility for a particular examination or guarantee the integrity of the resulting attendance record.
This study presents the design, implementation, and technical evaluation of a secure fingerprint-based examination attendance management system developed for Oyo State College of Agriculture and Technology, Igboora, Nigeria.
The system integrates student biodata management, academic catalogue administration, examination and session management, examination registration, administrator-controlled biometric enrollment, fingerprint verification, eligibility validation, attendance reporting, and audit logging. The application was implemented using Python, FastAPI, SQLAlchemy, MySQL, Bootstrap, JavaScript, and a .NET native bridge connected to a DigitalPersona U.are.U 4500 fingerprint reader. Windows Data Protection API (DPAPI) was used to protect local development enrollment artifacts. The database stores enrollment metadata and an opaque protected-artifact reference rather than raw fingerprint images or unprotected biometric templates.
Attendance creation is governed by a sequence of academic, authorization, biometric, and transaction-integrity checks. The implementation passed 41 automated tests, Python compilation checks, and Alembic schema validation, with no new schema upgrade operations detected. Real fingerprint-reader access, capture, enrollment-template creation, and successful and unsuccessful 1:1 verification outcomes were also demonstrated.
The findings establish the technical feasibility of integrating fingerprint verification with examination eligibility controls and transaction-safe attendance recording in a controlled, single-workstation environment.
Keywords
biometric authentication; fingerprint verification; examination attendance; examination impersonation; biometric template protection; transaction integrity; digital identity; tertiary education.
Full Text:
References
Abdullahi, S. M., Sun, S., Wang, B., Wei, N., & Wang, H. (2024). Biometric template attacks and recent protection mechanisms: A survey. Information Fusion, 103, Article 102144. https://doi.org/10.1016/j.inffus.2023.102144
Arman, S. M., Yang, T., Shahed, S., Al Mazroa, A., Attiah, A., & Mohaisen, L. (2024). A comprehensive survey for privacy-preserving biometrics: Recent approaches, challenges, and future directions. Computers, Materials & Continua, 78(2), 2087–2110. https://doi.org/10.32604/cmc.2024.047870
Federal Republic of Nigeria. (2023). Nigeria Data Protection Act, 2023. https://ndpc.gov.ng/wp-content/uploads/2024/03/Nigeria_Data_Protection_Act_2023.pdf
Hayat, A., Ali, S. S., Bhateja, A. K., & Werghi, N. (2024). FinTem: A secure and non-invertible technique for fingerprint template protection. Computers & Security, 142, Article 103876. https://doi.org/10.1016/j.cose.2024.103876
Hevner, A. R., March, S. T., Park, J., & Ram, S. (2004). Design science in information systems research. MIS Quarterly, 28(1), 75–105. https://doi.org/10.2307/25148625
International Organization for Standardization & International Electrotechnical Commission. (2021). ISO/IEC 19795-1:2021: Information technology—Biometric performance testing and reporting—Part 1: Principles and framework. https://www.iso.org/cms/live/live/en/sites/isoorg/contents/data/standard/07/35/73515.html
International Organization for Standardization & International Electrotechnical Commission. (2022). ISO/IEC 24745:2022: Information security, cybersecurity and privacy protection—Biometric information protection. https://www.iso.org/standard/75302.html
International Organization for Standardization & International Electrotechnical Commission. (2023). ISO/IEC 30107-3:2023: Information technology—Biometric presentation attack detection—Part 3: Testing and reporting. https://www.iso.org/standard/79520.html
Jain, A. K., Ross, A., & Prabhakar, S. (2004). An introduction to biometric recognition. IEEE Transactions on Circuits and Systems for Video Technology, 14(1), 4–20. https://doi.org/10.1109/TCSVT.2003.818349
Lahmidi, A., Moujahdi, C., Minaoui, K., Rziza, M., et al. (2022). On the methodology of fingerprint template protection schemes conception: Meditations on the reliability. Journal on Information Security, 2022, Article 3. https://doi.org/10.1186/s13635-022-00129-6
March, S. T., & Smith, G. F. (1995). Design and natural science research on information technology. Decision Support Systems, 15(4), 251–266. https://doi.org/10.1016/0167-9236(94)00041-2
Onyishi, D. U., & Igbinoba, C. K. (2021). Design and implementation of a biometric students' time and attendance logging system. Nigerian Journal of Technology, 40(3), 484–490. https://doi.org/10.4314/njt.v40i3.14
Patel, V. M., Ratha, N. K., & Chellappa, R. (2015). Cancelable biometrics: A review. IEEE Signal Processing Magazine, 32(5), 54–65. https://doi.org/10.1109/MSP.2015.2434151
Peffers, K., Tuunanen, T., Rothenberger, M. A., & Chatterjee, S. (2007). A design science research methodology for information systems research. Journal of Management Information Systems, 24(3), 45–77. https://doi.org/10.2753/MIS0742-1222240302
Ratha, N. K., Connell, J. H., & Bolle, R. M. (2001). Enhancing security and privacy in biometrics-based authentication systems. IBM Systems Journal, 40(3), 614–634. https://doi.org/10.1147/sj.403.0614
Sumalatha, U., Krishna Prakasha, K., Prabhu, S., & Nayak, V. C. (2024). A comprehensive review of unimodal and multimodal fingerprint biometric authentication systems: Fusion, attacks, and template protection. IEEE Access, 12. https://doi.org/10.1109/ACCESS.2024.3395417
Wang, S., & Hu, J. (2016). A blind system identification approach to cancelable fingerprint templates. Pattern Recognition, 54, 14–22. https://doi.org/10.1016/j.patcog.2016.01.001