结合生物特征识别技术的网络安全认证系统设计

Design of Network Security Authentication System Based on Biometrics

随着信息技术的飞速发展,生物特征识别技术正在被越来越广泛地应用到数据库和商业系统的访问控制中。这些应用需要采用一定的措施来抵御对安全的威胁。在涉及到一个开放的网络环境下的认证问题时,例如非面对面的交易中,加密技术(公钥加密术和数字签名技术)被采用来防止对生物认证信息的无授权的使用,同时保证数据的完整性。该文提出了一种包含可信任的第三方的网络认证结构,其结合了手形认证技术和加密技术。并开发了一种应用于基于网络环境的原型系统。对此模型的初步评估结果是令人满意的。类似的技术可以被应用到更加灵活的应用中。

With the rapid growth of information technologies,biometrics is being used more and more widely in applications for accessing databases or business systems.These applications need to implement measures to counter threats to security.In the case of authentication through an open network,such as non-face-to-face trading,cryptography techniques are adopted(public key cryptography and digital signature)to avoid unauthorized use of the biometric information and guarantee the integrity of data.This paper presents a trusted third party authentication architecture in which hand shapes verification techniques and cryptography techniques are combined.The paper develops a prototype system which is applied to a network-based workflow.Initial evaluation of the prototype system is encouraging.Similar techniques can be used to authenticate people for more flexible application.