Personal Identification Schemes by Using a Mobile Phone

身份识别方案是移动计算中最重要的问题之一。在这项研究中，我们提出了七个新的身份识别方案，使用带有Web浏览器或Java解释器的手机，并对所提出的方案的安全性和可用性进行了评估。所提出的方案基于挑战和应答方案，并利用移动电话的硬件特性。目前，已经提出了各种身份识别方案。它们被分为以下三种类型：1.基于人类记忆的方案，例如密码或PIN(个人识别码)；2.使用便携式设备，例如磁卡或IC卡；以及3.基于生物特征，例如指纹、虹膜或DNA。每种类型都有自己的长处和短处。生物识别被认为是最有希望的候选方法，尽管其硬件和操作成本仍然相对较高，假阴性率和阳性率不容忽视。此外，众所周知，几乎所有使用指纹识别的个人身份识别设备都很容易受到人工指纹的攻击，通过充分利用移动电话的优势，我们提出的方案在成本和安全性方面进行了合理的权衡。我们得出的结论是，我们提出的方案适用于小额支付、房间进出控制系统等。

Personal identification scheme is one of the most important issues in mobile computing. In this research, we propose seven new personal identification schemes by using a mobile phone with a web browser or a JAVA interpreter and for the proposed schemes, evaluate their security and usability. The proposed schemes are based on the challenge and response scheme and exploit hardware characteristics of a mobile phone.At present, various personal identification schemes have been proposed. These are classified into the following three types ; 1.Schemes based on human's memory such as password or PIN (Personal Identification Number), 2.Using a portable device such as a magnetic card, or an IC card, and 3.Based on biometrics such as fingerprint, iris or DNA. Each type has its strong points and weak points. Biometrics is considered as the most promised candidate, though its hardware and operational costs are still relatively high and false negative and positive rates cannot be negligible. Moreover, it is well-known that almost all personal identification devices using fingerprinting are quite vulnerable to an artificial finger.By fully utilizing the mobile phone's advantages, our proposed schemes give a reasonable trade-off with respect to cost and security. We conclude that our proposed schemes are suitable for micropayment, room in/out control system, and so on.