建構在模糊擷取器及列表法編解碼器上的認證系統

Abstract

密碼認證系統是最普遍和傳統的認證系統。但是因為人為設定的密碼的亂度不足並且使用者常常使用有意義的字當成密碼，所以密碼認證並不安全。近來有人開始關注生物特徵，例如虹膜、指紋或是手型。Dodis提出了由模糊擷取器來擷取生物特徵來做密碼學應用的概念。在這一篇論文中，我們以模糊擷取器為基礎建構一個指紋認證系統。除此之外，並在模糊擷取器裡改用列表法編解碼器來加強辨識的能力。

Password authentication is a traditional method to verify rights of a user. But it’s not secure, since the password is low-entropy and non-uniform. Recently people are thinking about using the biometric information, such as fingerprint, iris, hand shape…etc. Dodis et al. proposed fuzzy extractor to extract truly random string from biometric data for cryptographic use. In this thesis, based on the fuzzy extractor, we construct a fingerprint authentication system. Furthermore, we use list decodable codes to raise the identification rate of the system.