Building a two-factor biometric system