一种公钥密码体制下指纹识别与数字水印的身份认证协议

An Identity Authentication Protocol of the Public Key Infrastructure Combining Fingerprint Identification with Digital Watermarking

在公钥密码PKI(Public Key Infrastructure)安全体制下,结合指纹识别与数字水印的各自特性,提出了一种基于指纹特征作为数字水印的网络身份认证协议。由数据交互过程的分析可见,此协议方案能充分保证用户密钥和指纹信息的保密性和真实性,并能有效抵抗Stolen-verifier和Replay Attack两种攻击,可用于电子商务环境下高安全性的身份认证系统。

Combining characterics of fingerprint identification with digital watermarking technology, a novel identity authentication protocol is proposed in the framework of public key infrastructure （PKI） net- work security theory. By the interactive data process, the protocol can fully achieve important perform- ances of the security and authenticity for user key and fingerprint information, and can safely resist for the two common attacks of Stolen-verifier and Replay, therefore the protocol can apply for identity authentica- tion system in network e-commerce environment.