An approach to cryptographic key distribution through fingerprint based key distribution center
An approach to cryptographic key distribution through fingerprint based key distribution center
复制标题
一种通过基于指纹的密钥分发中心进行加密密钥分发的方法
DOI：
10.1109/icacci.2014.6968299
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
D. Samanta
中科院分区：
文献类型：
--
作者：
Subhas Barman;Samiran Chattopadhyay;D. Samanta
在信息和通信技术中，利用密码术来提供信息的安全性。在密码学中，密钥管理是整个系统的重要组成部分，因为系统的安全性取决于密钥的保密性。对称密码学使用相同的密钥（秘密密钥）用于消息加密以及密文解密。密钥的分发是对称密码学的主要挑战。在对称密码学中，密钥分发中心（KDC）负责在通信双方之间分发密钥，以建立安全的通信。在传统的KDC中，通信双方之间使用唯一的密钥来分发会话密钥。在这方面，我们提出的方法使用指纹的通信方的生物特征的唯一的密钥生成和分配会话密钥与指纹的用户的密钥的目的。由于密钥是由用户的指纹生成的，因此不存在破解唯一密钥的攻击范围。以这种方式，唯一密钥与通信方的生物特征数据相关联，并且该密钥不需要被该方记住。该方法将基于知识的身份验证转换为基于生物特征的KDC身份验证。同时，我们的方法保护了指纹身份的隐私，因为即使KDC被泄露，用户的身份也不会被泄露。
In information and communication technology, security of information is provided with cryptography. In cryptography, key management is an important part of the whole system as the security lies on secrecy of cryptographic key. Symmetric cryptography uses same key (secret key) for message encryption as well as cipher text decryption. Distribution of the secret key is the main challenge in symmetric cryptography. In symmetric cryptography, key distribution center (KDC) takes the responsibility to distribute the secret key between the communicating parties to establish a secure communication among them. In the traditional KDC, a unique key is used between communicating parties for the purpose of distributing session keys. In this respect, our proposed approach uses fingerprint biometrics of communicating parties for the purpose of unique key generation and distribute session key with the fingerprint based key of user. As the key is generated from fingerprint of user, there is no scope of attacks to break the unique key. In this way, the unique key is associated with biometric data of communicating party and the key is not need to remember by that party. This approach converts the knowledge based authentication to biometric based authentication of KDC. At the same time, our approach protects the privacy of fingerprint identity as the identity of user is not disclosed even when the KDC is compromised.