Abstract
User authentication based on biometrie system has several advantages over traditional systems which are only password-based. This architecture, known as fingerprint-cryptosystem has cryptography and fingerprint merged together, that securely stores the private key for cryptosystem. The private key of AES system is 128 bit long and is usually alphanumeric. Thus for a user to remember such a long password is cumbersome, hence a system called Fuzzy Vault exist which securely stores the private key. This architecture makes use of fingerprint features know as minutia points. Minutia points are evaluated on polynomial, whose coefficients are the secret key which is to be stored securely. Thus the evaluated values and the minutia points are stored securely in vault. The security of this system depends on the infeasibility of the polynomial reconstruction problem. This paper proposes a second layer of protection using password generated from user, which further does a logical xor computations. This paper thus suggests that even if biometric feature is compromised, without the user password, an attacker won't have access to vault. Thus to get access to the private key, an attacker must have access both to fingerprint and user password, to securely retrieve the key.
Original language | English |
---|---|
Title of host publication | 2016 International Conference on Circuits, Controls, Communications and Computing, I4C 2016 |
Publisher | Institute of Electrical and Electronics Engineers Inc. |
ISBN (Electronic) | 9781509053698 |
DOIs | |
Publication status | Published - 27-09-2017 |
Event | 2016 International Conference on Circuits, Controls, Communications and Computing, I4C 2016 - Bangalore, India Duration: 04-10-2016 → 06-10-2016 |
Conference
Conference | 2016 International Conference on Circuits, Controls, Communications and Computing, I4C 2016 |
---|---|
Country/Territory | India |
City | Bangalore |
Period | 04-10-16 → 06-10-16 |
All Science Journal Classification (ASJC) codes
- Computer Science Applications
- Energy Engineering and Power Technology
- Electrical and Electronic Engineering
- Control and Optimization
- Computer Networks and Communications
- Instrumentation