一个基于活体指纹的用户身份认证协议及其形式化分析

Live-fingerprint based user identity authentication protocol and its formal analysis

基于认证协议要求,提出了一个基于活体指纹的用户身份认证协议,并运用BAN逻辑对该协议进行了形式化分析。除形式化分析外,还从安全性和执行效率方面对该协议进行了定性分析,分析表明该协议能够使网络上的双方完成双向认证、有效地抵抗重放攻击、保证认证信息的机密性,并且具有良好的执行效率。

Based on the requirement of the authentication protocol, a livefingerprint based user identity authentication protocol is presented and analyzed formally by BAN logic. Besides formal analysis, the authors also study the protocol by qualitative analysis. This protocol enables two entities to authenticate each other on computer network, resists any cheat and relay attack, and protects livefingerprint authentication information. And the protocol is characterized by high efficiency as well.