Abstract: In order to solve the problem in protecting privacy of remote identity authentication using fingerprint, a novel scheme based on Fingercode and homomorphic encryption is presented. In the proposed scheme, the server’s template is stored in the encrypted version while the server’s templates of the past schemes are plain, so its security is ensured. A protocol is designed to allow that the server and the user can jointly compute the Euclidean distance between the template and the query without releasing the private data. In the protocol, “packing” method is employed to effectively reduce the load of the computation and communication between the server and customer. Analysis and experiment results show that the proposed scheme is secure and practical.

Key words: authentication, privacy-preserving, Fingercode, homomorphic encryption, packing

摘要： 针对开放网络中进行指纹身份认证时的双方指纹隐私保护问题，提出了基于Fingercode和同态加密的指纹认证方案。相较传统方案，该方案中服务器端模板以加密形式保存，保护了用户指纹数据的安全性；设计了安全认证协议，使得服务器和用户可以联合计算双方指纹特征的距离而不会泄露各自特征数据的隐私。协议中采用了数据打包技术，能够明显减轻服务器与用户之间的通讯压力和计算复杂度。分析和实验结果表明，该方案具有安全性和一定的实用性。

关键词: 认证, 隐私保护, Fingercode, 同态加密, 数据打包