Identity authentication method based on fuzzy vault and digital certificate

Abstract

The invention relates to an identity authentication method based on a fuzzy vault and a digital certificate, wherein the digital certificate and fingerprint identification are combined in a smart card, so that the digital identity and the physical identity of a user correspond to realize the identity authentication with high safety. The method comprises the following steps of: firstly generating an RSA key pair in a user UK, and sending a public key and relevant registration information to an RA for auditing by the user UK; when the auditing is passed, transferring user information to a CA for verification by the RA; after the verification is successful, generating the digital certificate for the user and sending to the user to be stored in the UK by the CA; and inputting a fingerprint in the UK by the registered user, extracting the true detail points in the fingerprint, dispensing the true detail points into the UK and a fingerprint server, and locking the PIN of the UK by the true detail points of the user, so that the digital certificate stored in the UK and a corresponding private key can be safely protected. In order to reduce the calculation amount of the smart card, a secret sharing method is introduced, so that only when the information in both the smart card and the server can be obtained, the PIN of the smart card can be recovered to release the digital certificate containing the private key.

Description

technical field [0001] The invention belongs to the intersection field of information security technology and biological authentication technology, relates to identity authentication based on digital certificate in information security technology and fingerprint fuzzy vault in biometric technology, specifically a double strong factor identity based on fuzzy vault and digital certificate The authentication method is suitable for identity authentication of high-end users or high-security customers with special needs. Background technique [0002] Identity authentication technology is the first barrier of network security and information system security. It is a solution to the process of confirming the identity of the operator in the computer network. It is a research field that has attracted much attention in the information security era. [0003] The real world we live in is a real physical world, and everyone has a unique physical identity. Now we also live in the digital ...

AI Technical Summary

Problems solved by technology

However, this technology still has some major security risks, that is, this method requires the user to enter a PIN code during identity authentication, and the PIN code may be monitored or intercepted by the attacker, which does not completely solve the problem of hackers intercepting or monitoring the PIN code and simulating user operations. risk, as well as the risk of fraudulent use when the smart card is lost or stolen

Images