基于Fuzzy Vault的身份认证

Identity Authentication Based on Fuzzy Vault

针对身份认证中可能出现的数字身份被冒用问题,提出了一种强双因子身份认证方案,将生成的数字证书及私钥存储于用户智能卡中,再使用fuzzy vault保护智能卡的PIN。通过组合2种不同条件来证明一个人的身份,安全性有了明显提高。同时为了减轻智能卡的计算负担,引入秘密共享思想,当且仅当用户智能卡和指纹服务器中信息都可得时,才释放其中绑定的智能卡PIN。该方案进一步完善了PKI的安全认证,适用于高端用户或有特殊需要的高安全度客户的身份认证。

A scheme named strong two-factor authentication was proposed,to resolve the possible issues of digital identity illegally used by attackers.We stored the generated digital certificate and its private key in a smartcard and protected the PIN of the smartcard by fuzzy vault.The security was improved obviously through combining two kinds of factors to prove one＇s identity.Meanwhile in order to relieve the computational burden of the smartcard,we imported secret sharing.Only when both the information of the smartcard and the fingerprint server are acquired,would the binding PIN of the smartcard be released.This scheme further perfects the authentication of PKI and is suitable for the authentication of high-end users or high safety customers with special requirements.