Research On Key Generation And Application Based On Biometric Template

With the rapid development of the Internet and computer, biometric encryption technology is widely used in e-commerce, online banking, virtual accounts and other public network environment, in order to meet the growing demand for information security. The security of biometric template is very important to the biometric encryption technology, the biometric certificate based on PKI (Public Key Infrastructure) technology and biometric encryption technology has protected the biometric template to a certain degree, however, currently, the relationship between biometric certificate and its owner is weak, its public and private keys depends on hardware device, but not by the owner’s biometric characteristics.From the practical point of view, take the biometric certificate as the core, this paper combines biometric encryption and PKI digital certificate to protect biometric template and generate biometric key. The main contents of this paper include the following parts:1. This paper designs the template open protection scheme based on digital certificate. On the basis of biometric encryption and PKI digital certificate, the paper analyzes the feasibility of using X.509 digital certificate as the medium to carry out the biometric template, in order to meet the needs of the public protection of the biometric templates and enhance the relationship between the certificate and the users., designs and describes the format of biometric certificate. At last, the generation and use of biometric certificate are described in detail.2. The biometric certificate scheme involves the generation and recovery of biometric key (BioKey). Based on the Fuzzy Vault algorithm, the fingerprint vault is constructed to achieve the binding of biometric template and BioKey, and then use the geometric hashing technique to match, finally, the Lagrange interpolation method and CRC calibration are used to recover the BioKey. This paper uses MATLAB to realize the algorithm, the complexity of the attack is 242, the results show that the fingerprint Fuzzy Vault can effectively protect the biometric template and BioKey.3. For the application of BioKey to biometric certificates and the relationship requirement, this paper designs a biometric certificate keys(BioRSA) generation method. Aiming at the problem that biometric key length can not meet the requirements of biological certificate public key algorithm, first of all, this paper combines the symmetric encryption algorithm and the large prime number generation algorithm to generate biometric primes(BioPrimes). Then the hash algorithm is used to design the BioPrimes, to ensure that the BioRSA are safe and usable. Finally, on VC6.0 and MIRACL library, the deterministic generation probability of BioPrimes is 100% and the hash values are always equal, show that the BioRSA generated by this method meet the certainty and availability.In summary, the biometric certificate can effectively protect the template from being tampered, and assure the security, and the BioRSA are generated by biometric template, the relevance is added between key and people, the real identity of the user and the network digital identity are exactly united.