Re: Fingerprint as cryptokey

On 01 Sep 2006 15:11:24 EDT, Mike Amling <nospam@xxxxxxxxxx> wrote:

It's also hard to keep your fingerprints secret,
especially if you accept drinks from strangers in bars. While I can see
the convenience of carrying around your finger, I don't see how carrying
around 80 or more bits of secret biases is any more convenient than
carrying around 80 or more bits of non-biometric secret key.

Encouraged by François Grieu's example earlier in this thread
A extended simple patent buster; for the all reading professional

--------------BEGIN patent buster-----------
Fingerprint sensors can often be fooled by artificially produced
duplicate the fingerprints collected from various objects e.g. from a
drink class which have been accepted from a stranger in a bar.

ATM machines typically authenticate the user by something the user has
(the ATM/ credit card) and something the user knows (the pin code).
The pin code alone is too short for providing any significant security
against brute force attacks, but the pin code still greatly enhances
the overall security by determining the faith of the ATM/ credit card.
The present patent buster describes a method, device and a device
arrangement for obtaining a similar two-factor authentication method
from users fingerprints, as PIN code- credit card combination
typically used in ATM machines.

1. Method for an authentication process based on biometric data,
wherein the measured body part parts constitute the first
authentication factor and the order and or the amount measured body
parts constitutes the second authentication factor.

2. The method of claim 1, wherein the biometric data is based on
fingerprint

3. The method of claim 1, wherein the authentication system
arrangement will only accept a limited amount of attempts before
invalidating the typical use of current users biometric data as an
authentication method.

--------------END patent buster-----------

ahhh and so, fingerprints become a PIN code. Mike, feel free to accept
drinks from strangers :)


Nevertheless, I've been surprised before by clever tricks that allow
things that seemed difficult.

Likewise, all the time

Juuso
.

Relevant Pages

  • Re: OT: fingerprint processing
    ... With Novell Modular Authentication Services, ... > The minute a foreign govcernment with inadequate data privacy ... > laws has a copy of your biometric information, ... > Do you really think that a general whose fingerprints can be used to ...
    (comp.os.vms)
  • Re: Biometric question
    ... Fingerprints are very secure as authentication, ... > biometrics, in fact only will be based on fingerprints biometric. ...
    (Security-Basics)
  • Re: Fingerprint as cryptokey
    ... studies have shown (including work that I did while I was at RSA) ... used from the fingerprints. ... And security equivalent to a PIN code can be sufficient in many cases, ...
    (sci.crypt)
Quantcast