Identity Authentication Based on Fuzzy Vault and Digital Certificate

Abstract

Identity authentication is an important component of network security to guarantee the security of the information and service on open network. In this paper, we propose a secure “strong two-factor identity authentication” which stores digital certificate in smart card, and then protects the PIN of smart card with fuzzy fingerprint vault. Only the legal user can release the securely stored PIN to open the smart card and acquire the stored digital certificate with its private key by inputting his/her fingerprint. This scheme further perfects the safe authentication of PKI, and can be applied in the identity authentication of high-end user or the user with special safety requirement.