基于生物特征的身份认证和密钥协商协议

Biometric based authentication and key agreement protocol

生物特征是相互独立且与人体直接相关的重要因素,因此具有不可抵赖的天然特性和便利性。随着网络的高速发展,身份安全认证的需求也在不断增加。为实现人员身份认证的真实性和可靠性提供更好的安全策略,将生物特征信息、抗碰撞哈希函数和智能卡等技术相结合,提出了一种基于生物特征的身份认证和密钥协商协议。采取用户模拟攻击、特权内部攻击和服务器欺骗攻击等方式,对该协议的正确性和安全方面进行剖析。通过分析验证,该协议具备高效的安全性与保密性。

Biological characteristics are mutually independent and directly related to people,which have undeniable natural characteristics and convenience.With the rapid development of the network,there is an ever-increasing demand for identity security authentication.In order to provide a better security strategy for the authenticity and reliability of personnel identity authentication,a biometric based identity authentication and key agreement protocol is proposed by combining biometric information,anti-collision hash function and smart card.The correctness and security of the protocol are analyzed by means of user simulation attack,privileged internal attack and server spoofing attack.Finally,the analysis proves that the protocol has efficient security and confidentiality.