Biometric authentication key negotiation method and system for secure communication

Abstract

The invention discloses a biometric authentication key negotiation method and system oriented to secure communication, and the method comprises the steps: firstly, processing two biometric features of an iris or a fingerprint, and respectively converting the two biometric features into biometric feature private keys in two forms of a biometric feature vector or a biometric feature vector set; then, encapsulating secret information by using a public key corresponding to the biological characteristic private key, wherein only a private key similar to the target biological characteristic private key can de-encapsulate the information; and finally, negotiating a session key for both communication parties, and realizing an implicit biometric authentication function in the process. According to the authentication key negotiation method provided by the invention, the client does not need to store a private key, the biological characteristics of the participant are protected in the key negotiation process, and noise in the biological characteristics can be tolerated at the same time.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to an authentication key negotiation method and system in applied cryptography, in particular to a security communication-oriented biological authentication key negotiation method. Background technique [0002] With the development of the Internet, especially the popularity of the mobile Internet, social networking platforms have become one of the most influential types of Internet applications. In the existing mainstream communication mode, the communication between the client and the server is encrypted, and the server itself can obtain plaintext information. Under normal circumstances, in order to use big data to obtain commercial profits, or to meet the monitoring needs of relevant departments, companies will ensure that they can obtain plaintext information on the server. And this has become the biggest security hole in the entire network, because once the server is...

AI Technical Summary

Problems solved by technology

Second, if an adversary attacks the end device, the private key may be stolen

More importantly, it cannot be determined in time whether the private key has been cloned

Third, it is difficult to update the public-private key pair in time when the participant loses or needs to replace the terminal device, because each new public key needs to be authenticated in an out-of-band manner before it can be used

Images