TY - GEN
T1 - BASE
T2 - A proposed secure biometric authentication system
AU - Crossingham, Colby G.
AU - von Solms, Sebastian H.
PY - 2008
Y1 - 2008
N2 - The use of biometrics as a secure remote authentication mechanism is hindered by a series of issues. In the case of fingerprints, an attacker can make physical copies of fingerprints by 'lifting' latent fingerprints off a non-porous surface. These lifted fingerprints can be used to illegitimately gain access to an authentication system. Password authentication systems only accept passwords that match 100%, whereas biometric authentication systems match submitted tokens provided they fall within a specified threshold. Without making use of a sufficient encryption scheme, illegitimately replaying a biometric token that has been tweaked slightly could still cause the authentication system to accept the submitted biometric token as a fresh biometric. BASE (Biometric Authentication System Entity), the proposed system, provides a solution to these challenges. As an alternative to current remote authentication systems, the BASE system utilizes a communication protocol that does not make use of encryption, passwords or timestamps, whilst still maintaining the security of the remote authentication process.
AB - The use of biometrics as a secure remote authentication mechanism is hindered by a series of issues. In the case of fingerprints, an attacker can make physical copies of fingerprints by 'lifting' latent fingerprints off a non-porous surface. These lifted fingerprints can be used to illegitimately gain access to an authentication system. Password authentication systems only accept passwords that match 100%, whereas biometric authentication systems match submitted tokens provided they fall within a specified threshold. Without making use of a sufficient encryption scheme, illegitimately replaying a biometric token that has been tweaked slightly could still cause the authentication system to accept the submitted biometric token as a fresh biometric. BASE (Biometric Authentication System Entity), the proposed system, provides a solution to these challenges. As an alternative to current remote authentication systems, the BASE system utilizes a communication protocol that does not make use of encryption, passwords or timestamps, whilst still maintaining the security of the remote authentication process.
UR - http://www.scopus.com/inward/record.url?scp=44649192964&partnerID=8YFLogxK
U2 - 10.1007/978-0-387-77996-6_8
DO - 10.1007/978-0-387-77996-6_8
M3 - Conference contribution
AN - SCOPUS:44649192964
SN - 9780387779959
T3 - IFIP International Federation for Information Processing
SP - 91
EP - 102
BT - Policies and Research in Identity Management
A2 - Leeuw, Elisabeth
A2 - Fischer-Hübner, Simone
A2 - Tseng, Jimmy
A2 - Borking, John
ER -