Biohashing: two factor authentication featuring fingerprint data and tokenised random number
Biohashing: two factor authentication featuring fingerprint data and tokenised random number
复制标题
DOI：
10.1016/j.patcog.2004.04.011
复制
发表时间：
2004-11-01
影响因子：
8
通讯作者：
Goh, A
中科院分区：
文献类型：
--
作者：
Jin, ATB;Ling, DNC;Goh, A
人工身份验证是一项安全任务，其工作是限制只有那些获得授权的人才能访问物理位置或计算机网络。这是由授权用户配备密码，令牌或使用他们的生物识别技术来完成的。不幸的是，前两者缺乏安全性，因为它们很容易被遗忘和被盗；即使是生物识别技术也存在一些固有的限制和特定的安全威胁。更实用的方法是组合两个或多个因素身份验证器，以获得安全性或便利性或两者兼而有之的好处。本文提出了一种新的双因素身份验证方法，该方法基于小波变换和Fourier-Mellin变换生成的标记伪随机数与用户特定指纹特征之间的迭代内积，从而产生一组用户特定的紧凑代码，称为BioHashing。BioHashing对数据捕获偏移的容忍度很高，相同的用户指纹数据导致高度相关的位串。此外，如果没有带有随机数据的令牌和用户指纹特征，就没有确定的方法来获得用户特定的代码。例如，这将通过更改用户特定的凭据来保护我们免受生物识别伪造，就像更改包含随机数据的令牌一样简单。与单独的生物识别技术相比，生物哈希具有显著的功能优势，即零相等错误率点和真实和冒名顶替人群的干净分离，从而可以消除错误的接受率，而不会增加错误拒绝率的发生。(C) 2004模式识别学会。Elsevier Ltd.出版。版权所有。
Human authentication is the security task whose job is to limit access to physical locations or computer network only to those with authorisation. This is done by equipped authorised users with passwords, tokens or using their biometrics. Unfortunately, the first two suffer a lack of security as they are easy being forgotten and stolen; even biometrics also suffers from some inherent limitation and specific security threats. A more practical approach is to combine two or more factor authenticator to reap benefits in security or convenient or both. This paper proposed a novel two factor authenticator based on iterated inner products between tokenised pseudo-random number and the user specific fingerprint feature, which generated from the integrated wavelet and Fourier-Mellin transform, and hence produce a set of user specific compact code that coined as BioHashing. BioHashing highly tolerant of data capture offsets, with same user fingerprint data resulting in highly correlated bitstrings. Moreover, there is no deterministic way to get the user specific code without having both token with random data and user fingerprint feature. This would protect us for instance against biometric fabrication by changing the user specific credential, is as simple as changing the token containing the random data. The BioHashing has significant functional advantages over solely biometrics i.e. zero equal error rate point and clean separation of the genuine and imposter populations, thereby allowing elimination of false accept rates without suffering from increased occurrence of false reject rates. (C) 2004 Pattern Recognition Society. Published by Elsevier Ltd. All rights reserved.