Re: Fingerprint as cryptokey

Francois Grieu wrote:
[...]
Of course, if one is allowed to make a function accepting
the biometric plus some extra data crafted at enrollment,
by using this extra data as foward error correction,
the problem can be solved. With litle extra work, this
allows a machine, of 100% public design, that let one
encipher, and decipher on a different machine of
the same model, using fingerprint / biometric as key,
and some provably quantifiable degree of security.
I can't beleive this concept is new.

That's how the methods I've heard of work. The system generates
some error-correction data on enrollment. The goal is that with
the EC-data plus the fingerprint, one can generate the same key;
while given EC-data and a key-confirmation oracle, finding the
key is intractable.


--
--Bryan
.

Quantcast