WO2009073144A2 - Bio-cryptography: secure cryptographic protocols with bipartite biotokens - Google Patents
Bio-cryptography: secure cryptographic protocols with bipartite biotokens Download PDFInfo
- Publication number
- WO2009073144A2 WO2009073144A2 PCT/US2008/013190 US2008013190W WO2009073144A2 WO 2009073144 A2 WO2009073144 A2 WO 2009073144A2 US 2008013190 W US2008013190 W US 2008013190W WO 2009073144 A2 WO2009073144 A2 WO 2009073144A2
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- biotoken
- bipartite
- data
- biometric
- key
- Prior art date
Links
- 238000000034 method Methods 0.000 claims abstract description 64
- 230000001131 transforming effect Effects 0.000 claims abstract description 5
- 239000000523 sample Substances 0.000 claims description 29
- 230000005540 biological transmission Effects 0.000 claims 3
- 238000013459 approach Methods 0.000 abstract description 20
- 238000011084 recovery Methods 0.000 abstract description 6
- 230000009466 transformation Effects 0.000 abstract description 4
- 230000008569 process Effects 0.000 description 23
- 238000012795 verification Methods 0.000 description 9
- 238000007726 management method Methods 0.000 description 8
- 230000001010 compromised effect Effects 0.000 description 7
- 238000011156 evaluation Methods 0.000 description 7
- 230000008859 change Effects 0.000 description 4
- 238000004422 calculation algorithm Methods 0.000 description 3
- 238000004891 communication Methods 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 239000000284 extract Substances 0.000 description 3
- 238000000605 extraction Methods 0.000 description 3
- 208000011580 syndromic disease Diseases 0.000 description 3
- 238000012790 confirmation Methods 0.000 description 2
- 238000012937 correction Methods 0.000 description 2
- 230000008570 general process Effects 0.000 description 2
- 239000000203 mixture Substances 0.000 description 2
- 238000013139 quantization Methods 0.000 description 2
- 238000011160 research Methods 0.000 description 2
- 101100234002 Drosophila melanogaster Shal gene Proteins 0.000 description 1
- 235000015076 Shorea robusta Nutrition 0.000 description 1
- 244000166071 Shorea robusta Species 0.000 description 1
- 241000950638 Symphysodon discus Species 0.000 description 1
- 238000012550 audit Methods 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 230000002457 bidirectional effect Effects 0.000 description 1
- 238000006243 chemical reaction Methods 0.000 description 1
- 230000009194 climbing Effects 0.000 description 1
- 238000004883 computer application Methods 0.000 description 1
- 238000004590 computer program Methods 0.000 description 1
- 238000005336 cracking Methods 0.000 description 1
- 230000001419 dependent effect Effects 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 210000000554 iris Anatomy 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 238000003909 pattern recognition Methods 0.000 description 1
- 210000001525 retina Anatomy 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
- 238000010200 validation analysis Methods 0.000 description 1
- 210000003462 vein Anatomy 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/32—User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
- H04L9/3213—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority using tickets or tokens, e.g. Kerberos
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
- H04L9/3231—Biological data, e.g. fingerprint, voice or retina
Definitions
- Bio-Cryptography Secure Cryptographic Protocols with Bipartite
- Embodiments of the present invention generally relate to biometric signatures and cryptographic key management for secure communication, logical and physical access. More specifically, embodiments of the present invention provide means for securely embedding a key or data within a biometric, and extracting that same key on later embedding of the correct biometric.
- Biometrics generally are methods of identifying or verifying the identity of a person based on a physiological characteristic, with the constraint that the characteristics are relatively unique to an individual and do not change significantly over time.
- biometric parameters unrelated to the secure storage of such biometric parameters or key management. Examples of the features measured are: face, fingerprints, hand geometry, palm prints, iris, retina, vein, and voice.
- features to be measured should be distinctive between people and have a sufficient level of invariance over the lifetime of the person.
- Biometric technologies are becoming the foundation of an extensive array of highly secure identification and personal verification solutions. Because our invention is concerned with the secure mixing of biometrics and keys, and largely independent of the details of how the biometric parameters are acquired, details of this category of prior art are omitted
- biometrics are not changeable, and must be protected because they present serious security risks if they are compromised.
- "Biometric authentication system with encrypted models” (United States Patent 6317834), discuses the risks and teaches an approach of encrypting and decrypting biometrics.
- the encryption can be further enhanced, as taught by "Biometrics template” (United States Patent 7302583) by splitting the key, using key-shares.
- Traditional encryption approaches, including '834 and '583 provide only limited protection for stored biometrics because the stored data must be decrypted for each use, so the keys are available to both parties when used.
- biometrics Even with encryption, presents other issues for both privacy and security concerns.
- one party say Alice
- the other say Bob
- Alice can send his raw "live” biometric data to Alice and trust she will protect the data and is the proper source for matching and must trust her stated results.
- Alice can send the matching data to Bob (e.g. for a match-on-card biometric to protect privacy) and then trust the result when Bob says it matches or not.
- biometrics Either way, one side must place considerable trust in the other, for both matching "results" and for protection of the privacy/security of the data, including encryption/decryption keys. This directly limits the trust some organizations or people will place in biometric solutions. It also limits remote authentication, e.g. web-based biometric authentication, where a "man-in-the-middle" could capture the biometric data and any keys.
- biometrics requires pre-shared keys for encryption and trusting the other party with the keys and biometric data.
- biometric data is to transform the data into some form of revocable token, where unlike the unique characteristics of biometrics, the user can have multiple different revocable biometrically-derived identity tokens.
- biometric-based identity tokens have been developed including "System and method for distorting a biometric for transactions with enhanced security and privacy" (US Patent 6836554 Bl). This patent teaches of using non-invertible distortions to protect data. It is worth noting that the conversion of the original biometric sample into any standard biometric template is formally non-invertible, as data is lost, yet the need to protect the template motivates their work.
- Biometric encryption Jain, Proc. of the IEEE Conf on Biometrics: Theory, Applications, and Systems (BTAS 2008), The technique called Biometric encryption, is described in "Fingerprint controlled public key cryptographic system" (US Patent 5541994), “Method and apparatus for securely handling a personal identification number or cryptographic key using biometric techniques” (US Patent 5712912), and “Method for secure key management using a biometric”, (US Patent 6219794). Both Fuzzy Vaults and Biometric Encryption methods bind a key to biometric data so that the key is released only after matching with the biometrics. These approaches differ in how they bind the data to biometrics, but both families of algorithms are subject to multiple attacks to compromise the embedded keys.
- the prior art provides a base for biometric-based security technologies and key management but is lacking in the important respects of protecting the biometric data and the embedded keys. It is also lacking in operational situations because of the need to have users reenroll to issue new biometric-based identity tokens or embed new keys.
- the present invention is a system and method for combining biometric and cryptographic techniques to provide identity tokens with embedded data.
- the method improves security by providing the ability to transform biometric data into a stored revocable identity token, which is unique per transaction, and to embed different data or keys into that token on each transaction. This provides an improved solution for a range of applications including cryptographic key management, network transactions, digital signatures, document verification and user authentication.
- FIG. 1 is a flow chart conceptually illustrating the steps in one embodiment of a bipartite biotoken.
- Figure 2 illustrates a flow chart of the stages of encoding the embedded key into a biotoken.
- Figure 3 illustrates a flow chart of the stages of decoding the embedded key from a bipartite biotoken.
- Figure 4 illustrates the process of generating a fingerprint biotoken with embedded data.
- Figure 5 illustrates the pair-row matching and recovery of non-stored hash values and embedded polynomial.
- Figure 6 is a flow chart of the critical components in generating/using a bipartite biotoken.
- Figure 7 is a flow chart of the stages an embodiment of bipartite biotokens for remote digital signature service.
- Figure 8 is a flow chart of the stages an embodiment of bipartite biotokens for a computer login with a one-time password.
- Figure 9 is a flow chart of the stages an embodiment of bipartite biotokens for an enhanced Kerberos login.
- embodiments of the present invention utilize a multi-stage transform to embed a key or nonce within a biometric signature such that later matching, with robust distance metrics, against different biometric samples provide means for recovering the embedded key.
- the transforms and the keys can be unique per transaction.
- biotokens we briefly summarize the concept, which we refer to herein as biotokens, as the preferred embodiment of the current invention builds from that secure template protection of biotokens.
- biotokens any biometric data that can be split into stable and unstable components, the stable portion can be encrypted in a reliable fashion, while the unstable portion is left in the clear.
- the aforementioned references provide for the definition of a biotoken transform for user I each field / in a biometric template, v(fj) wherein the transform scales/translates the data, e.g.
- v '(fJ) s (fJ)* v (fJ) + t(fJ) > and men separates v'(fj) into a quotient, q(fj), and modulus or remainder, r(fj), where q(fj) is stable, i.e. does not vary even when the base biometric data undergoes natural variations. Since q(fj) is stable, it can be encrypted or hashed, to form, w(fj).
- the encrypting/hash can use public key cryptography, cryptographic hashing and can incorporate company-specific keys and a user-specific passphrase.
- the same encoding process with the same pubic keys and potentially user-specific pass-codes, is applied for both the probe and gallery yielding B p and B g , respectively.
- the overall similarity/distance is computed as a combination of the per-field distance over all fields, in the same manner they were combined before the transform.
- the process of generating a biotoken allows nesting, where the residuals r(fj), are passed through each nesting level without change, but the encoded fields w(fj) can be subject to a additional layers of encrypting/hashing with added transform/encryption parameters el, e2, each being applied to the previous result, yielding w e i(w(fj)), W e2 (w e ⁇ (w(fJ))), etc.
- These multiple nested transforms can be applied over each field of the secure revocable biotokens B, resulting in multiple biotoken instances, B,B],B 2 derived from the same sample.
- the core of our bio-cryptographic key management is an extension to the revocable biotoken to provide bipartite match confirmation with data embedding.
- the underlying mechanism is a mixture of the biotoken matching and securing process combined with polynomial-based shared secrets and hashes for validation. This approach addresses more significant privacy and security issues than biotokens alone and completely prevents replay, phishing and man-in-the middle attacks; no non-public transmitted data is ever reused.
- any encryption/hashing process can be used for general biotokens
- the preferred embodiment for this invention uses public key cryptography so the nesting process can be formally invertible as long as the private key associated with the first stage of encoding is available. With this nesting in mind, we can define three properties for the bipartite biotoken:
- a bipartite biotokens BB is a transformation of the kih instance of user/'s secure biotokens B. This transformation supports matching in encoded space of a bipartite biotoken instance BB(j,k) with any secure biotoken instance BBQ, p) for the biometric features of a user j and a common series of transforms ei, e 2 ,..., e ⁇
- the bipartite biotoken transformation must allow the embedding of some data D into BB(j,k) represented as BB(j,k;D)
- Bipartite biotokens are similar in spirit to digital signatures and certificates - the approach allows both parties to mutually validate the transaction.
- the data transmitted in a bipartite biotoken addresses privacy, secure matching and non-repudiation.
- An overview of one embodiment of the basic process is described in Figure 1.
- a overview of one embodiment of the basic process is described in Figure 1.
- the process includes one party doing the embedding (100) and one that will be doing the matching (101). These describe roles, not people, e.g. it is possible these are the same individual at different points in time.
- the embedding party will then read either a stored biotoken, or compute a new base biotoken from a biometric sample (102), and the matching party also obtains its base biotoken (103). Either or both parties may used stored or live data to generate their base biotoken.
- One party generates a Transaction TID and sends it to the other (104), with the particular protocol for an application determining which party would initiate the transaction and generate the TID.
- the message may also include public key information associated with the biotokens, or those keys could be stored locally.
- the embedding party would take the TID and its base biotoken (102), use the TID to transform the base biotoken to make it unique to this transaction and would also embed the data into it to from the bipartite biotoken (105), and then send/store the bipartite party to the matching party (106).
- the "sending" could include storing the bipartite biotoken which is retrieved by the matching party at a later time, e.g. storing the embedded encryption key into a bipartite biotoken that is then stored on a USB stick.
- the matching party would transform its base biotoken using the TID and use the transformed biotoken to match the bipartite biotoken from the embedding party, with matching process recovering the embedded data (107).
- the matching party would then either send the recovered data back to the embedding party, or use the embedded data as a key to encrypt or decrypt data (108).
- the final, step, which is optional, the embedding party can verify that the match was successful by either matching the data returned in the message (108) matches the data it embedded, or by observing activities that prove the matching party was able to encrypt/decrypt data using the embedded key (109). This approach completely prevents phishing and man-in-the middle attacks as no transmitted data is ever reused except the public-key.
- the process can transmit/store an added encryption key in the bipartite biotoken to privacy protect the original biometric image data for eventual use in fraud prosecution, which increases the deterrent for attempted fraud, thus improving security.
- One of the fundamental security flaws in the fuzzy vault family and biometric encryption approaches is that they store raw data and associate it with the stored key. Thus an attacker that can gain access to multiple records, or who has access to the key, has sufficient information in the multiple related items of data that allow them to recover the remaining data. Many embodiments of the present invention improve the security by removing this direct connection. In particular, the embedded data is not related directly to the stored data.
- FIG. 2 shows the basic encoding/embedding process for an embodiment using a Reed Solomon Polynomial to encode the key.
- the hashed values, h from one biotoken can be used, in the nesting sense discussed above, as the encoded value for another round of encoding. While logically interchangeable, we use different symbols w and h to help the reader separate the different roles, the encoded/protected values in an base biotoken, and the hashed values in a bipartite biotoken.
- the system After transforming the whole biotoken, B, the result is a vector of evaluation point /.
- An important element of the present invention is that the point of evaluation, /, is not stored or transmitted.
- the result is a vector Ip and for the gallery I g , but with sufficient overlap between the probe and gallery there will be sufficient shared evaluation points for recovery of the polynomial.
- the system will match the probe and gallery (303), which is a process that will depend on the particular biometric being used. Given the matching identifies the matching rows of the probe and gallery the system can identify the evaluated polynomial data p from the gallery data which is associated with f in the probe. Collecting all such associations the system then has sufficient data to do the polynomial decode (304) and recover the embedded data/key. Since the biometric matching is only approximate there is still the potential for accidental matching and errors, which is why in the preferred embodiment the polynomial representing the key should including a level of error correction consistent with the expected errors for that particular biometric modality and matching process.
- Biotokens have been deployed, with significant performance evaluation for face and fingerprints, two very widely used biometric modalities. Extending these implementations to bipartite biotokens directly follows the process detailed above. Those skilled in the art will see how biotokens can be generated from voice, palm, finger geometry and any other biometric that represents its data a collection of fields to be matched.
- FIG. 4 shows a diagram with a more detailed description of the process for fingerprint biotoken encoding where we illustrate added protection needed for smaller bit fields. In our case we need to protect the data and be able to identify the polynomial coefficients. While PKI encryption may be computational intractable to invert, if the data encoded is a small finite field, say a 10, 16 or even 32 bit number, it is quite practical to try encoding all possible inputs and seeing if they match. When addressing this issue with traditional encryption, the data is padded with random data, before encoding, and the pad is then ignored after decoding.
- Step 1 (figure 4) Construct intra-fingerprint minutia pair comparison tables for probe fingerprint and one table for each gallery fingerprint to be matched against.
- the minutia- pair contain, for each pair in the input, the distance d (401) and angle a ⁇ (402) and al (403) which are each 16 bit numbers.
- the generalized quotients in the preferred embodiment we encode the generalized quotients as both a hash value (407) and we also AES encrypt all the generalized coefficients (408) to permit recovery later.
- AES encrypt the raw minutiae values.
- hash we use the term hash as general concept. Any "checksum”, including cryptographic checksums such as MD5 or SHAl, could be used. For many embodiments a traditional CRC, rather than a cryptographic checksum will be sufficient since detection of changes of an individual field is neither an issue nor a significant privacy risk. A single overall cryptographic checksum can be used to protect fields from tampering.
- the system collects all the data into a table of data, with one row for each pair of minutiae. (409). To further protect the data we can insert chaff columns (410) into the table. We also insert the polynomial that embeds the key as a column in the table. (41 1) To protect the data we shuffle each row, where during the reordering we store a known order of the data (modulo the number of columns), and place the evaluated polynomial in a known position relative to the encoded hash. (412). Note that in the shuffle, the control and residual data may be stored in a known position or stored relative to the hash.
- the total embedding capacity can be increased by splitting the key into multiple polynomials that are appended in order, e.g. h, pi, p2... allowing much larger embedded data with the requirement of matching fewer rows.
- Step 2 Match Given a probe and a gallery, construct an inter-fingerprint pair-pair compatibility table, wherein the system compares a probe print's minutia pair comparison table to a gallery print's minutia pair comparison table and constructs a new pair-pair compatibility table.
- a row in the probe table is considered to match a probe in the gallery table if there is a corresponding hash (CRC) entry, if the residuals are within a matching tolerance.
- CRC hash
- the system then scans the inter-fingerprint pair-pair table traverse and link table entries into a web/forest of clusters that have consistent orientation and consistent endpoints when linked per cluster.
- the system then combines compatible clusters and accumulate a match score. As each cluster is formed it also develops a set of potentially matching values for / and p, the polynomial evolution points and the evaluated polynomial values.
- Step 3 Embedded Data Recovery.
- the preferred embodiment of the recovery step for fingerprints, figure 5, is a variation on the general process of figure 3. Because of the small field sizes, we do not evaluate a polynomial separately for each of the distance and angle fields. Rather for each row we extract the d, al and a2, and generate their stable hash h and, i and residuals. For the computing of i, the system uses a different hash of qd,qal,qa2 than the one used to generate h.
- Figure 5 illustrates the gallery table (500), generated from the stored biotoken and with the embedded polynomial.
- h is a stored hash value
- p or P is a polynomial value
- e/E is an encrypted value
- c/C is chaff values
- i/I is an index hash value.
- the figure also illustrates the probe table (501) generated from the scanned biometric, with the index hash i, stored in the place of the polynomial p. It shows the collected data during matching (502). During the matching the associated values of the h are matched between the a row in the gallery table and the probe table, and verified with the residual data (not show) of that row.
- the known location of h allows the system to identify /; in the gallery (504) and i in the probe table (505), and copy them into the matched table. If the row does not match, nothing is copied. Because these are small fields there is a change for an accidental match, which may identify a hash h and polynomial p (506) in the gallery and associate it with some other field such as chaff c (507).
- the process continues over all matching rows eventually building the match table with sufficient matched sets of the polynomial values P, and their associated evaluation index I.
- the system can then order the polynomial data based on I and reconstruct the underlying polynomial, generally including some level of error correcting, and recover the embedded key.
- FIG. 6 shows the most important elements, where a biometric sample (601) is used to generate a base biotoken.
- a biometric sample (603) is also used to derive the matching biotoken(604).
- either or both of these biotokens might be stored in a server or computed from a live sample and can be from vary different times or locations.
- the base biotoken (602) is combined with a digital key (605) to form the bipartite biotoken.(606).
- the transfer (607) could be via electronic communication or storage in some physical medium, e.g. a disk or 2D bar code.
- the applications can vary the content and use of the embedded key, which can be an encryption key, but it can also be a nonce, a password, a signature or any other piece of data that can be embedded.
- the concept of the non-stored evaluation points is generalized so that each row of the table contains multiple polynomials evaluated at points il, i2, ..., in This has the advantage of allowing larger embedded data sizes given a smaller number of matching rows.
- Various embodiments of this invention allow solution to a range of applications and security problems.
- One embodiment uses the bipartite biotoken to solve the problem of secure login to a computer.
- the data embedded in the bipartite biotoken is used in a remote digital signature server.
- the sensor side first sends (701) a public key, and the subject's ID.
- the signature server responds with the transaction ID (702).
- the client/sensor side will generate a one-way hash H of a message M (703) that is to be signed, then collect the biometric (704) , and generate a bipartite biotoken with H embedded within it (706).
- This biotoken is sent to the signature server (706) with the original message M.
- the signature server will generate a local bipartite biotoken from its base biotoken (708) for the user, and match the bipartite biotoken it receives (709). If the two biotokens match, the hash H for M is released. The server generates its own hash of M, and if that hash matches H (710), it concludes it's a valid request to sign.
- the signature server then signs (711) and sends a biotoken signature back to the sensor, where the signature is validated (712) and an audit log may be appended with server information.
- bipartite biotoken biometrically-validated signature server is a novel approach to increasing ease of use while also addressing the man-in-the-middle attack. Users no longer need a "secured physical token" for storing their private key, they can remotely access it for signatures wherever/whenever they need it. Formal digital signatures can even be added via an email-based implementation of the protocol.
- the bipartite biotoken secured hash ensures no man in the middle can modify the contents/hash before it is signed. Thus, in our protocol, a biotoken mis-match would force a termination of the transaction, as the invalid signature is immediately noted by the sensor side.
- the bipartite biotoken approach for digital signatures does not depend on a device storing the biometric to protect the biometric data or the private key.
- the recipient must trust that the senders device is not compromised because no biometric data is actually shared with the recipient, only a verification status.
- both sides have actual confirmation of the match, not just a status field which could be easily generated by a compromised device.
- the bipartite biotoken' s embedded data is used for computer login, as described in figure 8.
- the client computer (800) sends a request for login (801) to the bipartite server (802). After the request, client also begins the biometric scan (803).
- the bipartite server (802) then generates a local random one-time use password or acquires it from a standard password generator and updates the password database (804) of the local password-based computer login system (805).
- the bipartite server embeds the one-time password as the data of the user's bipartite biotoken and sends (806) it back to the client.
- the client matches the received bipartite biotoken with the locally generated token and extracts the one time password which is used to login via the password-based login process (807).
- This bipartite biotoken is using its bio-cryptographic protocol to manage a one-time password.
- This is an example of an enhancement, in this case of the well known S-Key protocol. This increases system security as the password is strong and changes each time, but unlike S-Key it does not need to be remembered by or carried by the users. The password is very strong so it cannot be compromised in the short life time when it is valid. Unlike S-Key, only the authorized user can extract the password, via the bipartite biotoken matching.
- Kerberos is a popular trusted third-party authentication protocol designed to grant access throughout a network, and is the most widely used network access authentication protocol. Kerberos avoids sending passwords between the client and server by using the user's password as an encryption key for the Kerberos "ticket".
- Kerberos avoids sending passwords between the client and server by using the user's password as an encryption key for the Kerberos "ticket”.
- the client requests a ticket-granting ticket for login (901) from the bipartite Kerberos trusted third-party server (902).
- the server generates a session key for encryption of the remaining messages and embeds that in the bipartite biotokens sent (903) it to the client.
- the client then performs (904) the biometric scan, matching and release of the session key.
- the session key is then used in the remaining steps of the standard Kerberos protocol of sending the request for a server ticket (905) to the ticket granting server (906), who replies with the server ticket (907) which the client can then provide in a request for service (908) to any application server (910).
- This bipartite biotoken key management solves the well known problems with Kerberos. By using a random session key, embedded in the bipartite biotokens, it circumvents the problems of a dictionary attack and also improves non-repudiation.
- the embedded key could have just as easily been generated by the client and sent to the server, who could match and then use the key to encrypt the TGT.
- the critical elements here is that one party is generating a bipartite biotoken with the embedded key and the claimed identity of the client, and the other party, by matching it with a local biotoken can exract the key, and in doing so both parties have authenticated themselves because they have the proper access to the biometric data to manipulate the key.
- Establishing mutual trust via the bipartite biotoken authentication is an important contribution of the present invention beyond the prior art.
- bipartite biotoken' s embedded data is used for data, secret or key management in a wide range of computer applications that previously used either shared secrets such as passwords or traditional biometrics.
- Using bipartite biotokens to store encryption keys could enable improved security at a lower cost for removable storage or data at rest applications.
- Embedding a key within a bipartite biotoken without a server, e.g. a bipartite biotoken printed as a 2D barcode would enable verification of the owner of document/tickets without a centralized server.
- Other applications such as document verification, boarding passes, ticket verification, which are generally not verified, can be easily verified with this technology.
- the combined secure embedded data extracted only via matching with data derived from the user's biometrics, has wide applications to improves security and privacy.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Biomedical Technology (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Biodiversity & Conservation Biology (AREA)
- Life Sciences & Earth Sciences (AREA)
- Computing Systems (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
- Collating Specific Patterns (AREA)
Abstract
Description
Claims
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
GB1010257A GB2467884A (en) | 2007-11-28 | 2008-11-26 | Bio-cryptography secure cryptographic protocols with bipartite biotokens |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US458407P | 2007-11-28 | 2007-11-28 | |
US61/004,584 | 2007-11-28 | ||
US12550208P | 2008-04-25 | 2008-04-25 | |
US61/125,502 | 2008-04-25 |
Publications (3)
Publication Number | Publication Date |
---|---|
WO2009073144A2 true WO2009073144A2 (en) | 2009-06-11 |
WO2009073144A8 WO2009073144A8 (en) | 2011-05-05 |
WO2009073144A3 WO2009073144A3 (en) | 2012-04-05 |
Family
ID=40718411
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2008/013190 WO2009073144A2 (en) | 2007-11-28 | 2008-11-26 | Bio-cryptography: secure cryptographic protocols with bipartite biotokens |
Country Status (2)
Country | Link |
---|---|
GB (1) | GB2467884A (en) |
WO (1) | WO2009073144A2 (en) |
Cited By (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2012034250A1 (en) * | 2010-09-13 | 2012-03-22 | City University Of Hong Kong | Secure data in removable storage devices via encryption token(s) |
CN103607711A (en) * | 2013-12-11 | 2014-02-26 | 北京交通大学 | Position similarity based key distribution method for intelligent terminal network |
CN108123796A (en) * | 2016-11-29 | 2018-06-05 | 展讯通信(上海)有限公司 | Method and device, fingerprint tokens and its control method and device of fingerprint comparison |
WO2019022658A1 (en) * | 2017-07-27 | 2019-01-31 | Fingerprint Cards Ab | Methods and devices of enabling authentication of a user of a client device over a secure communication channel based on biometric data |
WO2019054914A1 (en) * | 2017-09-13 | 2019-03-21 | Fingerprint Cards Ab | Methods and devices of enabling authentication of a user of a client device over a secure communication channel based on biometric data |
US10305690B1 (en) | 2017-11-29 | 2019-05-28 | Fingerprint Cards Ab | Two-step central matching |
US11711216B1 (en) * | 2019-12-02 | 2023-07-25 | T Stamp Inc. | Systems and methods for privacy-secured biometric identification and verification |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20010039619A1 (en) * | 2000-02-03 | 2001-11-08 | Martine Lapere | Speaker verification interface for secure transactions |
US20020176583A1 (en) * | 2001-05-23 | 2002-11-28 | Daniel Buttiker | Method and token for registering users of a public-key infrastructure and registration system |
US7178025B2 (en) * | 1998-02-13 | 2007-02-13 | Tec Sec, Inc. | Access system utilizing multiple factor identification and authentication |
US7590861B2 (en) * | 2002-08-06 | 2009-09-15 | Privaris, Inc. | Methods for secure enrollment and backup of personal identity credentials into electronic devices |
-
2008
- 2008-11-26 WO PCT/US2008/013190 patent/WO2009073144A2/en active Application Filing
- 2008-11-26 GB GB1010257A patent/GB2467884A/en not_active Withdrawn
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7178025B2 (en) * | 1998-02-13 | 2007-02-13 | Tec Sec, Inc. | Access system utilizing multiple factor identification and authentication |
US20010039619A1 (en) * | 2000-02-03 | 2001-11-08 | Martine Lapere | Speaker verification interface for secure transactions |
US20020176583A1 (en) * | 2001-05-23 | 2002-11-28 | Daniel Buttiker | Method and token for registering users of a public-key infrastructure and registration system |
US7590861B2 (en) * | 2002-08-06 | 2009-09-15 | Privaris, Inc. | Methods for secure enrollment and backup of personal identity credentials into electronic devices |
Cited By (18)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9336402B2 (en) | 2010-09-13 | 2016-05-10 | City University Of Hong Kong | Secure data in removable storage devices via encryption token(s) |
WO2012034250A1 (en) * | 2010-09-13 | 2012-03-22 | City University Of Hong Kong | Secure data in removable storage devices via encryption token(s) |
CN103607711A (en) * | 2013-12-11 | 2014-02-26 | 北京交通大学 | Position similarity based key distribution method for intelligent terminal network |
CN103607711B (en) * | 2013-12-11 | 2017-01-04 | 北京交通大学 | A kind of method for distributing key of intelligent terminal network based on position similarity |
CN108123796A (en) * | 2016-11-29 | 2018-06-05 | 展讯通信(上海)有限公司 | Method and device, fingerprint tokens and its control method and device of fingerprint comparison |
US11115215B2 (en) | 2017-07-27 | 2021-09-07 | Fingerprint Cards Ab | Methods and devices of enabling authentication of a user of a client device over a secure communication channel based on biometric data |
WO2019022658A1 (en) * | 2017-07-27 | 2019-01-31 | Fingerprint Cards Ab | Methods and devices of enabling authentication of a user of a client device over a secure communication channel based on biometric data |
WO2019054914A1 (en) * | 2017-09-13 | 2019-03-21 | Fingerprint Cards Ab | Methods and devices of enabling authentication of a user of a client device over a secure communication channel based on biometric data |
CN109923545B (en) * | 2017-09-13 | 2022-03-08 | 指纹卡安娜卡敦知识产权有限公司 | Method and device for enabling authentication of a user of a client device over a secure communication channel based on biometric data |
CN109923545A (en) * | 2017-09-13 | 2019-06-21 | 指纹卡有限公司 | The method and apparatus for allowing to carry out the certification to the user of client device by secure communication channel based on biometric data |
US11165772B2 (en) | 2017-09-13 | 2021-11-02 | Fingerprint Cards Ab | Methods and devices of enabling authentication of a user of a client device over a secure communication channel based on biometric data |
WO2019108111A1 (en) * | 2017-11-29 | 2019-06-06 | Fingerprint Cards Ab | Two-step central matching of fingerprints |
EP3718035A4 (en) * | 2017-11-29 | 2020-10-07 | Fingerprint Cards AB | Two-step central matching of fingerprints |
KR20200092950A (en) * | 2017-11-29 | 2020-08-04 | 핑거프린트 카드즈 에이비 | Match the center of the fingerprint in 2 steps |
US10574452B2 (en) | 2017-11-29 | 2020-02-25 | Fingerprint Cards Ab | Two-step central matching |
US10305690B1 (en) | 2017-11-29 | 2019-05-28 | Fingerprint Cards Ab | Two-step central matching |
KR102604066B1 (en) | 2017-11-29 | 2023-11-20 | 핑거프린트 카드즈 아나카툼 아이피 에이비 | Two-level central matching of fingerprints |
US11711216B1 (en) * | 2019-12-02 | 2023-07-25 | T Stamp Inc. | Systems and methods for privacy-secured biometric identification and verification |
Also Published As
Publication number | Publication date |
---|---|
WO2009073144A3 (en) | 2012-04-05 |
GB201010257D0 (en) | 2010-07-21 |
WO2009073144A8 (en) | 2011-05-05 |
GB2467884A (en) | 2010-08-18 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8838990B2 (en) | Bio-cryptography: secure cryptographic protocols with bipartite biotokens | |
Xi et al. | A fingerprint based bio‐cryptographic security protocol designed for client/server authentication in mobile computing environment | |
US10728027B2 (en) | One-time passcodes with asymmetric keys | |
Sutcu et al. | Protecting biometric templates with sketch: Theory and practice | |
Uludag et al. | Biometric cryptosystems: issues and challenges | |
Rathgeb et al. | A survey on biometric cryptosystems and cancelable biometrics | |
O'Gorman | Comparing passwords, tokens, and biometrics for user authentication | |
US6845453B2 (en) | Multiple factor-based user identification and authentication | |
EP1815637B1 (en) | Securely computing a similarity measure | |
US6959394B1 (en) | Splitting knowledge of a password | |
TWI479427B (en) | Defining classification thresholds in template protection systems | |
US20070031009A1 (en) | Method and system for string-based biometric authentication | |
WO2006067739A2 (en) | Method and device for key generation and proving authenticity | |
Scheirer et al. | Bipartite biotokens: Definition, implementation, and analysis | |
WO2006091301A2 (en) | Passcodes | |
WO2009073144A2 (en) | Bio-cryptography: secure cryptographic protocols with bipartite biotokens | |
Scheirer et al. | Bio-cryptographic protocols with bipartite biotokens | |
Xi et al. | Bio-cryptography | |
US7272245B1 (en) | Method of biometric authentication | |
US20070106903A1 (en) | Multiple Factor-Based User Identification and Authentication | |
Suresh et al. | Two-factor-based RSA key generation from fingerprint biometrics and password for secure communication | |
GB2457491A (en) | Identifying a remote network user having a password | |
Radha et al. | A study on biometric template security | |
Mitchell et al. | Security of the Lin-Lai smart card based user authentication scheme | |
KR100986980B1 (en) | Biometric authentication method, client and server |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
ENP | Entry into the national phase |
Ref document number: 1010257 Country of ref document: GB Kind code of ref document: A Free format text: PCT FILING DATE = 20081126 |
|
WWE | Wipo information: entry into national phase |
Ref document number: 1010257.2 Country of ref document: GB |
|
WWE | Wipo information: entry into national phase |
Ref document number: 4554/DELNP/2010 Country of ref document: IN |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 08879352 Country of ref document: EP Kind code of ref document: A2 |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 08879352 Country of ref document: EP Kind code of ref document: A2 |