一种基于指纹特征的远程通行字双向认证方案

提出了一种基于指纹特征并且不泄露指纹特征的远程通行字双向认证方案。在该方案中,根据用户的指纹特征生成通行字,系统服务器中不存储用户指纹模板库,也不存储通行字表,系统管理员无法推导出用户的指纹特征,入侵者不能导出任何用户的通行字和任何保密信息,系统可对来访的用户进行认证,用户也可以对系统的真实性进行认证;该方案能抵御重试攻击,能防止系统内部人员伪造访问记录。

A Remote Password Double Authentication Scheme Based upon Fingerprint

A remote password authentication scheme based upon fingerprint is given.The paper analyses this scheme's security property.In the scheme ,every user's remote password is generated according his fingerprint .The scheme is with-out user's fingerprint template database and password list in server.System manager cannot deduce any user's fingerprint feature.Intruders cannot derive any user's password and any fingerprint information.Authentication is double between user and system;can withstand replaying attacks,avoid to fabricate access history.