指紋辨識智慧卡安全認證機制之設計與實作

智慧卡運用在當今生活中無所不在，一人擁有多張卡片已為常態，智慧卡的廣泛應用，對提高各行業的管理水準、生活便利性及推動智慧城市等都發揮了重要作用，而在應用科技的管理便利性之下，認證使用者與保護個人資料安全為最重要的議題。近年來生物辨識技術的興起掀起一波熱潮，生物辨識技術運用在智慧卡，生物特徵擁有唯一的特性，可用來認證使用者，不會有遺失和忘記密碼的狀況發生，也能防範盜用之行為，安全性增加並且更加便利於智慧卡的使用。 Elliptic Curve Diffie–Hellman key Exchange (ECDH)為橢圓曲線加密演算法和Diffie-Hellman金鑰交換協定的結合，橢圓曲線加密演算法使用較少的金鑰位元長度可達到和RSA加密演算法相同的安全程度，因此運用在有限記憶體裝置中的智慧卡非常適合。本論文為實現指紋辨識於智慧卡安全系統，以ECDH方法為基礎應用於智慧卡及Reader，來加解密文件完成安全認證，符合標準ISO/IEC14443A和ISO/IEC7816之協定，為一套完整的智慧卡安全系統。

關鍵字

智慧卡；指紋辨識；身分認證； ECDH

並列摘要

Smart cards are available and ubiquitous in our life. One person who has and uses multiple smart cards is normal. The applications of smart cards on. It is important that the smart cards are used to improve the management qualities of various industries and promoted the smart cities. Also, the smart cards have played a key role for the convenience of our daily life. The authentication of users and protection of private data are the most important issues on the card systems. The development of biometric technology has great advancement in recent years. The unique characteristic of the biometrics is applied to authenticate the smart-card users. The users will not keep the passwords in mind any longer. The smart cards will prevent the misappropriation and increase the security.　 ECDH is a combination of the Elliptic Curve Cryptography encryption algorithm and the Diffie-Hellman key exchange protocol. The key lengths of the Elliptic Curve Cryptography encryption algorithm are shorter than the ones of the RSA encryption algorithm on the same security level. For this reason, the Elliptic Curve Cryptography encryption algorithm is very suitable for the smart cards of the limited-size memory. This paper’s implementation is a complete solution of the fingerprint identification of the smart card systems. The ECDH method is applied to the smart card and the card reader is used to encrypt and decrypt the security files. The total system will be satisfied the requirements of the specifications of the ISO/IEC14443A and ISO/IEC 7816.