Fingerprint-based credential entry

A physical medium for fingerprint-based personal identification number (PIN) entry, the physical medium comprising:

• a fingerprint scanner;
• one or more memories that store fingerprint data and a PIN;
• and
• one or more processors, communicatively coupled to the one or more memories, configured to:
• receive power from a terminal that is in communication with the physical medium;
• scan a fingerprint using the fingerprint scanner and the power received from the terminal;
• compare scanned fingerprint data, determined based on scanning the fingerprint, and the stored fingerprint data using the power received from the terminal;
• determine that the scanned fingerprint data sufficiently matches the stored fingerprint data based on comparing the scanned fingerprint data and the stored fingerprint data;
• and
• transmit the PIN to the terminal based on determining that the scanned fingerprint data sufficiently matches the stored fingerprint data.

A method of authentication, comprising:

• receiving, by a system and from a terminal, an account identifier and an authentication credential based on an interaction between the terminal and a physical medium that stores the account identifier and the authentication credential,
• wherein the authentication credential and the account identifier are communicated from the physical medium to the terminal in connection with an exchange;
• authenticating, by the system, the exchange using the account identifier and the authentication credential;
• identifying, by the system and after authenticating the exchange, a user associated with the authentication credential based on an account profile associated with the account identifier, wherein the account profile stores:
• one or more primary authentication credentials corresponding to one or more primary users associated with the account identifier, and
• one or more secondary authentication credentials corresponding to one or more secondary users associated with the account identifier;
• determining, by the system, that the user is a secondary user of the one or more secondary users;
• determining, by the system, a user-specified condition associated with the secondary user, wherein the user-specified condition is specified by a primary user of the one or more primary users;
• determining, by the system, whether the user-specified condition is satisfied;
• and
• transmitting, by the system, one of an approve notification for the exchange or a deny notification for the exchange to the terminal based on whether the user-specified condition is satisfied.