Proposal on a multifactor biometric authentication method based on cryptosystem keys containing biometric signatures

Abstract

Conventional biometric authentication methods have a serious problem -it is easy to steal the biological information of another person, such as fingerprints, iris patterns, and facial forms. Accordingly, it is essential to protect authentication systems from an attack like impersonation with an artificial finger. To solve this problem, in this paper, we would like to propose a multifactor biometric authentication method based on cryptosystem keys containing biometric signatures. This paper has two new aspects: one is to propose a method for embedding two kinds of data -personal biological information and a confidential item corresponding to a conventional secret key -into a cryptosystem key to detect any impersonation even if the biological information is stolen, and the other is to demonstrate the safety of the method, a factor which has never been referenced.From a privacy protection point of view, we believe that the multifactor biometric authentication method is of great significance. Moreover, it can economically establish certification authorities having the biological information.Meanwhile, in order to uniquely embed the biological information into the cryptosystem key, an algorithm is needed to uniquely select a representative template as described in this paper. In this paper, we propose only the concept of this algorithm and hope that concrete methodologies will be studied in the future.

Improving the accuracy and storage cost in biometric remote authentication schemes

“…When we take typical values for the parameters in Table 2, we obtain the following relations. For biometric modalities with M ¼ 512 bytes template sizes (Itakura and Tsujii, 2005) and for 160-bit ECC curves, M % kP, if 20rk r30 as implemented in Sutcu et al (2006) and Mansukhani et al (2007). Also, for current PIR systems with communication cost PIR, we have PIR 5OðNÞ.…”

Enhancing Information Security and Privacy by Combining Biometrics with Cryptography

“…Thus, classical biometric user verification is involved in this configuration which provides the verification result and based on which the key (or some parameters An example of this system can be found in Itakura and Tsujii [59] where some secret parameters are released upon successful biometric verification. The released parameters are required to obtain the cryptographic keys.…”

Practical multi-factor biometric remote authentication

“…Although a simple client server biometric authentication system is proposed in [11], the decision can be computed after a decryption operation as in the schemes summarized in [7], thus the leakage of the system's secret keys endangers the security of the system. Besides, MFBA systems are proposed in [12], [13], [14], [15], [16], where the last two schemes performs the matching on card for a local authentication followed by a remote authentication. Also, cancelable biometrics is combined with a smart card for storing only the helper information [17], [18] for a MFBA.…”