Authentication Failures

When authentication of the Nymi Band fails, the Nymi Band vibrates and displays a retry message.

Figure 1. Authentication Failure Screen with Retry message

Nymi Band authentication failures occur for one of the following reasons:

  • Fingerprint matching failure - when the authentication fails as a result of a fingerprint mismatch, the Nymi Band vibrates and displays the Retry message about 1 second after the user places their finger on the fingerprint sensor and bezel.
  • Liveness failure - when the authentication fails due to the inability to detect a consistent ECG signal on the wrist, the Nymi Band vibrates and displays the Retry message about 13 seconds after the user places their finger on the fingerprint sensor and bezel.

Troubleshooting Fingerprint Mismatch Failures

If the fingerprint authentication fails, ensure the following:

  • Fingerprint sensor is clean and dry.
    • If the fingerprint sensor is dirty, clean with a 70% isopropyl alcohol wipe, allow it to dry completely, and then retry authentication.
    • If the fingerprint sensor is wet, dry completely with a lint-free towel, and then retry authentication.
  • User does not press too hard or too softly on the fingerprint sensor.
  • User’s finger is clean and dry.
    • If the finger is dirty, clean the hands and allow them to dry completely, and then retry authentication
    • If the finger is too dry, rub some lotion well into the finger, and then retry authentication.
    • If the finger is too wet, rub the finger with an alcohol wipe or with hand sanitizer, allow the finger to dry completely, and then retry authentication
  • User places their finger on the centre of the sensor, touching the surrounding bezel.
  • User keeps their finger still on the sensor and bezel during the authentication period.
  • User does not lift their finger off the sensor or bezel until the authentication process completes.
  • Ensure that the Nymi Band fits snugly on the wrist.

Troubleshooting Liveness Detection Failures

If the liveness detection fails, ensure the following:

  • Bottom sensor is clean and dry.
    • If the bottom electrode is dirty, clean with a 70% isopropyl alcohol wipe, allow it to dry completely, and then retry authentication.
    • If the bottom electrode is wet, dry completely with a lint-free towel, and then retry authentication.
  • User’s finger is clean and dry.
    • If the finger is dirty, clean the hands and allow them to dry completely, and then retry authentication
    • If the finger is too dry, rub some lotion well into the finger, and then retry authentication.
    • If the finger is too wet, rub the finger with an alcohol wipe or with hand sanitizer, allow the finger to dry completely, and then retry authentication
  • User keeps their finger still on the sensor and bezel during the authentication period.
  • User's wrist is not too dry. Before authentication, wash and completely dry the wrist before putting on the Nymi Band, or rub some lotion well into the wrist, and then retry authentication.
  • Nymi Band bottom electrode remains in contact with the wrist during the authentication period. If the position of bottom electrode prevents contact, remove the Nymi Band, reposition the Nymi Band on the wrist, and then try authentication again.
  • User does not lift their finger off the sensor or bezel until the authentication process completes.
  • Ensure that the Nymi Band fits snugly on the wrist and does not move around during the authentication process.
Note: The SQL database contains a record of the failed authentication attempt. The section Collecting Data From a Nymi Band provides more information.

Authentication Lockout

Lockout policies help prevent adversarial users from gaining unauthorized access to systems through brute-force attacks.

After 50 consecutive failures due to a fingerprint mismatch, the Nymi Band displays the See Admin icon and prevent the user from performing additional authentication attempts.

The lockout persists on the Nymi Band, even if the user removes the Nymi Band. The lockout will also persist while the Nymi Band is dead or while charging.

Clear the lockout by one of the following methods:

  • Re-enroll the user to the Nymi Band.
  • Authenticate the user with their credentials in the Nymi Band Application. A user can authenticate by using corporate credentials only if the Corporate Credentials Authentication option was enabled in the NES policy at the time of enrollment.
Note: Consider re-enrolling the user to the Nymi Band with another fingerprint if the user is repeatedly locked out with their fingerprint.

Articles in this section

Was this article helpful?
0 out of 0 found this helpful
Share