The Design And Implementation Of A Biometrics-based Robust Remote User Authentication Scheme

Authentication assures that illegal users are not able to access system resourcesfraudulently. User authentication plays a significant role in access control. Remoteauthentication is one of the security measures for remote accessing in the environment usingsmart card and biometrics information. With the rapid growth of online resources in Internetand the improvement of self protection consciousness of users，mutual authentication isneeded to provide a secure way to simultaneously protect the interests of both the resourceowners and the users.In this thesis, we present an efficient biometrics-based mutual authentication scheme,which is based on personal biometrics, one-way hash function and smart card. Forenhancing the system security, we make use of a one-time key h (h (U IDi||X S)||T)generated by using the timestamp T. In the scheme, the authentication process can resist allknown attacks including replay attacks and the DOS attacks, and needs only twice onlinemessage transmissions. Analysis shows that the scheme is secure. Our scheme only uses XORoperation, random number generating and hash faction in order to provide a simplecomputation.A prototype system of this scheme is developed by using C++programming on VisualStudio2005platform. By combining a smart card reader with a fingerprint scanner, mutualauthentication can be achieved between a resource owner and a user. Our experiment withseveral different hash functions has been done to find out which solution is the best one. Theresults show that our design is secure to resist malicious attacks, and its computation andcommunication costs are acceptable for most practical applications.