摘要
随着使用生物特征进行身份认证的应用越来越广泛,生物特征的隐私保护也越来越受到人们关注。一种在线指纹认证方案即e-Finga方案,可以提供安全且高效的在线指纹认证服务。但是该方案存在泄露用户指纹特征的风险。本文针对该身份认证方案设计了一种临时指纹攻击方法,并通过实验证明该攻击方法可以获取到用户的指纹特征。
With the more and more extensive application of identity authentication using biometrics, the privacy protection of biometrics has attracted more and more attention. An online fingerprint authentication scheme, e-finga scheme, can provide safe and efficient online fingerprint authentication services. However, the scheme has the risk of disclosing the user’s fingerprint characteristics. This paper designs a temporary fingerprint attack method for the identity authentication scheme, and experiments show that the attack method can obtain the user’s fingerprint characteristics.
作者
刘尧
LIU Yao(Institute of Cryptology Engineering,Engineering University of PAP,Xi'an Shaanxi 710086,China)
出处
《信息与电脑》
2021年第19期111-113,共3页
Information & Computer
基金
国家自然科学基金项目(项目编号:U1636114)。
关键词
同态密码
双线性映射
攻击方法
隐私保护
homomorphic encryption
bilinear mapping
attack method
privacy protection
