基於虹膜辨識之安全認證系統

A Secure Authentication System based on Iris Recognition

林明毅(Ming-Yi Lin)

指導教授 ： 朱元三

國立中正大學/工學院/電機工程學系/碩士(2014年)

摘要

近年來，許多在網路上的應用程式以及網路服務蓬勃發展，使得網路人口爆炸性的增加，但網路上大多數連線都發生於雙方皆不認識的情況下，也就是說雙方透過網路在傳遞資料時並無法確認對方是誰。為解決在匿名性如此高的網路所產生的隱私保護之問題，資料傳輸時就必須提供一個認證機制，透過這個認證機制防止惡意人士透過網路截取相關他人隱私資訊，因此本篇想要探討的是如何提升使用者的身分資料安全，並達到快速、有效的身分確認。
一般常見的身分認證系統常常透由通行碼、smart card等辦法進行認證，但使用者仍須記憶一組或多組識別碼或密碼來進行身分驗證。在此論文中，我們提出了基於虹膜辨識技術下的加密身分認證系統。利用此方法進行認證，使用者不需額外記憶資料，相較於指紋也不需要接觸性的辨識，而且虹膜具有不易被盜取的特性。透過RSA演算法及雜湊檢驗法進行憑證交換，可確保傳輸的憑證資料的安全，並使用虹膜特徵值比對進行身分驗證。實驗的結果顯示本方法，能夠在安全性極高的環境下進行有效的進行身分驗證。

關鍵字

認證系統 ； 虹膜辨識

並列摘要

The development of internet application is remarkably rapid recently. However, personal privacy cannot be guaranteed to transfer safely at most time. In other words, user cannot ensure weather the connection is reliable or not. Due to this privacy issue, the personal information must be transmitted under an authentication mechanism. Through this mechanism we can prevent malicious access efficiently.
In this paper, we propose a secure authentication system based on Iris recognition technology. Through Iris-recognition’s features, we can implement a convenient and contactless identity authentication system without extra device. Exchange certificates using the RSA algorithm, and Iris code that produced by Iris Recognition System perform identity verification. Through this method, we can protect files in a secure way by an effective and convenient identity authentication system.

並列關鍵字

Authentication ； Iris Recognition

參考文獻

[1] Lamport, L., ”Password authentication with insecure communication”,Commun. ACM, 1981.

[2] Huang, X.; Chen, X.; Li, J.; Xiang, Y.; Xu, L., "Further Observations on Smart-Card-Based Password-Authenticated Key Agreement in Distributed Systems," Parallel and Distributed Systems, IEEE Trans., 2013.

[3] X. Huang, Y. Xiang, A. Chonka, J. Zhou and R.H. Deng, “A Generic Framework for Three-Factor Authentication: Preserving Security and Privacy in Distributed Systems”, IEEE Trans., 2011.

[4] Yi-Pin Liao; Shuenn-Shyang Wang, "A robust password-based remote user authentication scheme using bilinear pairings without using smart cards," Computer Symposium (ICS), 2010.

[5] Hu, J.; Gingrich, D.; Sentosa, A., "A k-Nearest Neighbor Approach for User Authentication through Biometric Keystroke Dynamics," Communications, 2008.