Advanced Attendance Management System (AAMS): Hardware-Bound Two-Factor Proxy Resistance via WebGL Device Fingerprinting and Rotating QR Authentication
Prof. Mohammed Juned
Project Guide
Dept. of Computer Engineering Rizvi College of Engineering Mumbai, India
Hanmante Ashish
Dept. of Computer Engineering Rizvi College of Engineering Mumbai, India
UIN: 241P055
Khan Istiyaq
Dept. of Computer Engineering Rizvi College of Engineering Mumbai, India
UIN: 241P009
Mishra Priyanshu
Dept. of Computer Engineering Rizvi College of Engineering Mumbai, India
UIN: 241P006
Prajapati Nitesh
Dept. of Computer Engineering Rizvi College of Engineering Mumbai, India
UIN: 241P005
Abstract—Proxy attendance, where a present student marks attendance on behalf of an absent peer, is a pervasive vulnerability in academic institutions worldwide. Conventional methods — paper sign-in sheets, verbal roll calls, and static QR codes — verify only token possession, not physical presence. This paper presents the Advanced Attendance Management System (AAMS), a security-focused, server-rendered web application built on the Django 4.2 framework. AAMS eliminates proxy attendance through a novel two-factor verification model that combines time-bound rotating QR tokens with hardware-bound WebGL device fingerprinting. The student's physical GPU renders a fixed triangle via deterministic vertex and fragment shaders; the resulting pixel buffer is hashed using SHA-256 through the Web Crypto API, yielding a 64-character device-unique fingerprint that cannot be forwarded or replicated without the original hardware. Server-side atomic collision detection flags, logs, and rejects any submission that presents a hash already associated with a different student in the same session. Tested across four heterogeneous devices, the system achieves zero false-positive and zero false-negative proxy detection across all identified attack vectors, with sub-2ms fingerprint query latency at 200 records per session. AAMS requires no additional hardware, no browser extensions, and no native mobile application, reducing deployment cost to a single server installation.
Keywords—Proxy Attendance; WebGL Fingerprinting; QR Code Authentication; Django; Device Fingerprinting; Geofencing; Role-Based Access Control; Attendance Management System
