An improved fingerprint-based remote user authentication scheme using smart cards

Authors:
Youngkwon Lee;Taekyoung Kwon
Affiliations:
Information Security Lab., Sejong University, Seoul, Korea;Information Security Lab., Sejong University, Seoul, Korea
Venue:
ICCSA'06 Proceedings of the 2006 international conference on Computational Science and Its Applications - Volume Part II
Year:
2006

Citing 5
Cited 1

A Real-Time Matching System for Large Fingerprint Databases

IEEE Transactions on Pattern Analysis and Machine Intelligence
Strong password-only authenticated key exchange

ACM SIGCOMM Computer Communication Review
Password authentication with insecure communication

Communications of the ACM
On diffie-hellman key agreement with short exponents

EUROCRYPT'96 Proceedings of the 15th annual international conference on Theory and application of cryptographic techniques
A new efficient fingerprint-based remote user authentication scheme for multimedia systems

KES'05 Proceedings of the 9th international conference on Knowledge-Based Intelligent Information and Engineering Systems - Volume Part III

Provably secure remote truly three-factor authentication scheme with privacy protection on biometrics

IEEE Transactions on Information Forensics and Security - Special issue on electronic voting

Quantified Score

Hi-index	0.00

Visualization

Abstract

In the computing environments, remote user authentication is an important part of security. Combining fingerprint verification and smart cards is one of a potential solution for strong remote user authentication. In this paper, we cryptanalyze an efficient fingerprint-based remote user authentication scheme introduced by Yoon and Yoo in 2005, and propose a new scheme improved with regard to security and efficiency. Actually, the Yoon-Yoo scheme is a security improvement on the previous Lin-Lai fingerprint-based verification scheme, while the Lin-Lai scheme is a precedent improvement on the Lee-Ryu-Yoo scheme. However, we have found that the most recent Yoon-Yoo scheme is still vulnerable to various types of impersonation attacks. Our new protocol is resistant to those attacks and more efficient than the previous schemes.