Biological authentication method for resisting privacy disclosure

Abstract

The invention discloses a biological authentication method for resisting privacy disclosure, which solves the problem of information disclosure in the process of storing and authenticating biological characteristic information, and comprises the following steps: 1) registration phase: a user Ui registers a user name IDi and auxiliary information Wi from an authentication server (AS) through a sensor (S), and registers reference biological template relevant information Bi from data base (DB); and 2) authentication phase: the user Ui provides the current new biological characteristic information for the authentication server (AS) through the sensor (S), the authentication server cooperates with a database to judge the authenticity of the user identity by calculating the new biological characteristic information, the Wi and the Bi, and the authentication server returns the final authentication result to the user. Because the reference biological template information of the user is stored in the authentication server and the database respectively, the authentication information calculated by the database cannot be falsified without the reference biological template information stored on the authentication server.

Description

technical field [0001] The invention relates to a biometric authentication method, in particular to a biometric authentication method against privacy leakage. Background technique [0002] Biometric authentication uses biometric features as the means of identity authentication. Due to the advantages of uniqueness, permanence, difficulty in guessing, no need to remember, carry around, and non-transferability of biometric features, biometric authentication is compared with traditional "username + secret" Authentication is safer, more reliable, and more convenient. However, since biometrics are sensitive personal privacy information, unlike keys, which can be replaced arbitrarily, the privacy protection of biometrics has aroused great concern. [0003] The document "A formal study of the privacy concerns in Biometric-based remote authentication schemes, Lecture Notes Computer Science, Springer-Verlag, 2008, Vol.4991, p56-70" discloses a remote biometric authentication method f...

AI Technical Summary

Problems solved by technology

However, there are security holes in this method, that is, the verification result information is vulnerable to tampering attacks

In fact, the correct verification result in this scheme is obviously the result of encrypting the plaintext information "1" with the public key of the service provider. Here, both the plaintext "1" and the public key information are public. It is easy to forge the correct verification result, which makes the fake user of the attacker pass the authentication

Images