No abstract

One of the solutions to the auto-alignment problem in the fuzzy fingerprint vault exploited the idea of the geometric hashing technique. Although this solution can provide higher verification accuracy, it requires more memory space due to the large size of the hash table. In this paper, we propose an approach to reduce the size of the hash table by using the time-memory tradeoff without sacrificing the verification accuracy. That is, instead of generating the full hash table at the enrollment phase, our approach generates the enrollment hash table "on-the-fly" at the verification phase. The size of the hash table can be reduced further by selecting the basis set carefully. Based on the experimental results, we confirm that the proposed approach can reduce both the static and the dynamic memory requirements without sacrificing both the verification accuracy and the security level.

No abstract

In this study, the hybrid authorization quotation technique is based on the device ID for the integrity of the source region guarantee of user certificate, in order to improve the convenience and security for user in the hybrid PKI certificate Mechanism for authentication. The feature of the model in which it is presented from this paper is 5. First, because the user can select the policy himself in which it matches with each authentication situation and security level, the convenience can be improved. Second, the integrity of the source region of the user certificate can be guaranteed through the comparison of the DLDI Key, that is the hash-value of the device ID. Third, the security can be improved by continuously changing an encoding, and the value of the key in which it decodes through the EOTP Key. Fourth, the index value is added to a certificate, and the storage of a certificate is possible at the Multi-Device. Fifth, since the addi the inan aratus for the integrity of the source region guarantee of a certificate is not needed, the authentication process time can be reduced and the computational load of the certificate server can be reduced also.

Recently, in the smartcard-based authentication system, there is an increasing trend of using fingerprint for the card holder verification, instead of passwords. However, the security of the fingerprint data is particularly important as the possible compromise of the data will be permanent. In order to protect the fingerprint data, the fuzzy vault scheme has emerged as a promising solution to the user privacy problem. The techniques, such as "fuzzy vault," which is based on the difficulty of the polynomial reconstruction need to be developed for the smartcard-based environment. In this paper, we propose a secure and efficient approach, which reconstructs a polynomial on a smartcard with the aid of a server by using fuzzy fingerprint vaults distributed into the smartcard and the server. The goal of our approach is, under the real-time constraint, to enhance the security level of the fuzzy vault scheme against not only the typical brute-force attack, but recently reported correlation attack which finds the real minutiae using multiple fuzzy vaults enrolled for different applications. Based on the experimental results, we confirmed that our secret distribution-based approach can perform the fuzzy vault-based fingerprint verification more securely (by a factor of 177 in brute-force attack, and by a factor of 10 9 in correlation attack) and quickly (by a factor of 17) on a combination of a smartcard and a server.