Provably secure remote truly three-factor authentication scheme with privacy protection on biometrics

IEEE Transactions on Information Forensics and Security

Volumn 4, Issue 4, 2009, Pages 933-945

  Fan, Chun I ^a   Lin, Yi Hui ^a  

^a NATIONAL SUN YAT SEN UNIVERSITY   (Taiwan)

Author keywords

Biometrics; Passwords; Remote authentication; Security and privacy; Smart cards

Indexed keywords

AUTHENTICATION SCHEME; BIOMETRIC DATA; COMPUTATION COSTS; PRIVACY PROTECTION; PROVABLY SECURE; REMOTE AUTHENTICATION; REMOTE SERVERS; SECURITY AND PRIVACY;

AUTHENTICATION; NETWORK SECURITY; SERVERS; SMART CARDS;

BIOMETRICS;

EID: 70450285606     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2009.2031942     Document Type: Article

References (26)

1. F. A. Afsar, M. Arif, and M. Hussain, "Fingerprint identification and verification system using minutiae matching," in Proc. National Conf. Emerging Technologies, 2004, pp. 141-146.
2. M. Bellare and P. Rogaway, "Entity authentication and key distribution," in Proc. Advances in Cryptology (CRYPTO'93), 1993, vol.773, pp. 22-26, Lecture Notes in Computer Science.
3. A. Bhargav-Spantzel, A. C. Squicciarini, E. Bertino, S. Modi, M. Young, and S. J. Elliott, "Privacy preserving multi-factor authentication with biometrics," J. Comput. Security, vol.15, no.5, pp. 529-560, 2007.
4. M. Burrows, M. Abadi, and R. Needham, "A logic of authentication," ACM Trans. Comput. Syst., vol.23, no.5, pp. 1-13, 1989.
5. C. C. Chang and I. C. Lin, "Remarks on fingerprint-based remote user authentication scheme using smart cards," ACM SIGOPS Operating Syst. Rev., vol.38, no.4, pp. 91-96, 2004.
6. G. I. Davida, B. J. Matt, R. Peralta, and Y. Frankel, "On the relation of error correction and cryptography to an offine biometric based identication scheme," in Proc. Workshop Coding Cryptography, 1999, pp. 129-138.
7. Y. Dodis, R. Ostrovsky, L. Reyzin, and A. Smith, "Fuzzy extractors: How to generate strong keys from biometrics and other noisy data," in Eurocrypt 2004, pp. 523-540.
8. L. Gong, R. Needham, and R. Yahalom, "Reasoning about belief in cryptographic protocols," in Proc. 1990 IEEE Computer Society Symp. Research in Security and Privacy, 1990, pp. 234-246.
9. F. Hao, R. Anderson, and J. Daugman, "Combining crypto with biometrics effectively," IEEE Trans. Comput., vol.55, no.1, pp. 1081-1088, Jan. 2006.
10. A. Juels and M. Wattenberg, "A fuzzy commitment scheme," in Proc. ACMConf. Computer and Communications Security, 1999, pp. 28-36.
11. A. Juels and M. Wattenberg, "A fuzzy vault scheme," in Proc. IEEE Int. Symp. Information Theory, 2002, p. 408.
12. H. S. Kim, J. K. Lee, and K. Y.Yoo, "ID-based password authentication scheme using smart cards and fingerprints," ACM SIGOPS Operating Syst. Rev., vol.37, no.4, pp. 32-41, 2003.
13. J. K. Lee, S. R. Ryu, and K. Y. Yoo, "Fingerprint-based remote user authentication scheme using smart cards," Electron. Lett., vol.38, no.12, pp. 554-555, 2002.
14. Y. Lee and T. Kwon, "An improved fingerprint-based remote user authentication scheme using smart cards," in Proc. ICCSA 2006, 2006, vol.3981, pp. 915-922, Lecture Notes in Computer Science. (Pubitemid 44045394)
15. C. H. Lin and Y. Y. Lai, "A flexible biometrics remote user authentication scheme," Comput. Standards Interfaces, vol.27, no.1, pp. 19-23, 2004.
16. V. Matyas, Jr. and Z. Riha, "Toward reliable user authentication through biometrics," IEEE Security Privacy, vol.1, no.3, pp. 45-49, May/Jun. 2003.
17. V. Miller, "Uses of elliptic curves in cryptography," Advances in Cryptology- Crypto85, ser. Lecture Notes in Compute Science, no.218, pp. 417-426, 1985, Springer-Verlag.
18. C. J. Mitchell and Q. Tang, Security of The Lin-Lai Smart Card Based User Authentication Scheme Tech. Rep., 2005 [Online]. Available: http://www.rhul.ac.uk/mathematics/techreports
19. D. M. Nessett, "A critique of the Burrows, Abadi, and Needham logic," Operating Syst. Rev., vol.24, no.2, pp. 35-38, 1990.
20. M. O. Rabin, Digitalized Signatures and Public-key Functions as Intractable as Factorizations MIT Lab., Computer Science, Cambridge, MA, Tech. Rep. MIT/LCS/TR212, 1979.
21. M. Rejman-Greene, Secure Authentication Using Biometric Methods Information Security Tech. Rep., 2002, vol.7, pp. 30-40, No.3.
22. L. Rila and C. J. Mitchell, Security Protocols for Biometrics-Based Cardholder Authentication in Smartcards, ser. Lecture Notes in Computer Science. New York: Springer-Verlag, 2005, vol.3482, pp. 488-497.
23. M. Scott, "Cryptanalysis of an ID-based password authentication scheme using smart cards and fingerprints," ACM SIGOPS Operating Syst. Rev., vol.38, no.2, pp. 73-75, 2004.
24. Y. Sutcu, Q. Li, and N. Memon, "Protecting biometric templates with sketch: Theory and practice," IEEE Trans. Inf. Forensics Security, vol.2, no.3, pp. 503-512, Sep. 2007.
25. U. Uludag, S. Pankanti, S. Prabhakar, and A. K. Jain, "Biometric cryptosystems: Issues and challenges," Proc. IEEE, Special Issue on Multimedia Security for Digital Rights Management, vol.92, no.6, pp. 948-960, Jun. 2004.
26. E. J. Yoon and K. Y. Yoo, "A new efficient fingerprint-based remote user authentication scheme for multimedia systems," in 9th Int. Conf. Knowledge-Based & Intelligent Information & Engineering Systems (KES 2005), 2005, pp. 332-338, Paper LNAI 3683.