Enhancing of biometric authentication with pass strings and cryptographic checksums

摘要

Conventional biometric authentication systems store the biometric template or a hash of its digitization, which raises concerns around template privacy and revocability. In this paper, we propose a biometric hash generation scheme, where the normalized biometric template is concatenated with a pass string (PS), e.g. a password or PIN, in order to achieve a robust and secure biometric authentication scheme that overcomes problems around privacy and revocability. The scheme presented here is an improved form of two-factor authentication (2FA) which could enhance biometric authentication in such systems as automated teller machines (ATM), and at same time protect the privacy of biometrics and ease biometric revocability.