Advanced Attendance Management System (AAMS): Hardware-Bound Two-Factor Proxy Resistance via WebGL Device Fingerprinting and Rotating QR Authentication

Proxy attendance, where a present student marks attendance on behalf of an absent peer, is a pervasive vulnerability in academic institutions worldwide. Conventional methods — paper sign-in sheets, verbal roll calls, and static QR codes — verify only token possession, not physical presence. This paper presents the Advanced Attendance Management System (AAMS), a security-focused, server-rendered web application built on the Django 4.2 framework. AAMS eliminates proxy attendance through a novel two-factor verification model that combines time-bound rotating QR tokens with hardware-bound WebGL device fingerprinting. The student’s physical GPU renders a fixed triangle via deterministic vertex and fragment shaders; the resulting pixel buffer is hashed using SHA-256 through the Web Crypto API, yielding a 64-character device-unique fingerprint that cannot be forwarded or replicated without the original hardware. Server-side atomic collision detection flags, logs, and rejects any submission that presents a hash already associated with a different student in the same session. Tested across four heterogeneous devices, the system achieves zero false-positive and zero false-negative proxy detection across all identified attack vectors, with sub-2ms fingerprint query latency at 200 records per session. AAMS requires no additional hardware, no browser extensions, and no native mobile application, reducing deployment cost to a single server installation.