一种基于指纹的身份认证协议

Fingerprint-based authentication protocol

提出一种基于指纹的身份认证协议,它对stolen-verifier(攻击者使用从认证服务器中盗窃的用户指纹信息冒充合法用户)和重发攻击 (Replay Attack)[1]是安全的,保证了用户指纹信息的保密性和真实性。认证用户可以从中获得的最大好处就是:当他们登录服务系统时,他们不需要除了指纹以外的其它任何东西。

We propose a fingerprint-based authentication protocol (FBAP) that is secure against stolen-verifier(the attacker can use the fingerprint information that he stole from the server to masquerade as a legitimate user in the authentication protocol) and replay attacks and ensures the privacy and authenticity of users?fingerprints information. The most benefit that users can obtain is that they need nothing other than their fingerprints when they log on the service system.