A Networking Identity Authentication Scheme Combining Fingerprint Coding and Identity Based Encryption

摘要

Current certificate-based information security technologies are facing a challenge of lacking the exact connection between cryptographic key and legitimate users and a problem of comprehensive management of certificates. In this paper we propose a novel networking identity authentication scheme based on fingerprint coding method and Identity-based encryption (IBE). Fingerprint code is a dual-factor authenticator which combines a token, e.g. USB key, with user''s fingerprint feature by direct mixing of pseudo-random number generated by token and fingerprint feature. IBE allows for a sender to encrypt a message to a receiver without access to a public key certificate. This scheme can improve the security of user authentication and simplify comprehensive management of certificates, in the meantime, protect against fingerprint data fabrication and stolen. The security and efficiency of our proposed scheme meet the requirements of practical applications.