基于CRC与离散对数难题的双重认证模糊金库方案

Fuzzy Authentication Scheme Based on CRC and Discrete Logarithm

模糊金库方案是生物特征加密领域一种流行的密钥绑定方案,它将生物特征与秘密数据安全地绑定在一起,形成一个金库且能够实现"模糊"解锁,攻击者不能从金库中获取生物特征或秘密数据。因此,方案可以在保护秘密数据的同时,也保护用户的生物特征。基于CRC循环冗余编码的模糊金库是模糊金库应用于生物特征认证识别的一种重要实现,但是其存在两类严重问题,即CRC碰撞和无法抵抗混合替代攻击。提出了基于CRC与离散对数难题的双重认证模糊金库,可以同时解决这两类问题。

Fuzzy vault scheme is a popular scheme of key binding in the field of Biometric encryption.It binds the biometric features together with the secret data safely,forming a vault and achieving'fuzzy'unlock.An attacker can not obtain biometric or secret data from the vault,so the program can protect the secret data while protecting the user's biometric features.Fuzzy vaults based on CRC cyclic redundancy are an important implementation of fuzzy vaults for biometrics authentication and identification systems,but there are two serious problems,CRC collisions and irreplaceable hybrid alternative attacks.In this paper,we propose a fuzzy vault of dual authentication based on CRC and discrete logarithm problem,which can solve these two problems at the same time.