Post-Quantum Authentication Framework Based on Iris Recognition and Homomorphic Encryption

IF 3.6 3区计算机科学 Q2 COMPUTER SCIENCE, INFORMATION SYSTEMS

IEEE Access Pub Date : 2025-09-03 DOI:10.1109/ACCESS.2025.3605676

Mariano López-García;Enrique Cantó-Navarro

{"title":"Post-Quantum Authentication Framework Based on Iris Recognition and Homomorphic Encryption","authors":"Mariano López-García;Enrique Cantó-Navarro","doi":"10.1109/ACCESS.2025.3605676","DOIUrl":null,"url":null,"abstract":"This paper proposes an authentication protocol based on post-quantum cryptography and iris recognition. The process uses a modified version of the original McEliece cryptographic algorithm that provides post-quantum security. Additionally, iris recognition is included in the decryption process, ensuring that only authentic users have access to confidential information, or can operate critical infrastructures or systems that must be protected against malicious users or impostors. A distributed framework, in which several autonomous entities interact with each other, participates in the whole process to reduce the odds of a successful attack. Biometric templates are encrypted and safely stored in a database. These templates meet all requirements described in the ISO/IEC 24745 standard regarding data protection. Due to the homomorphic property of McEliece, the decryption process operates using the encrypted version of these biometric templates, ensuring that critical information is not revealed. The use of McEliece does not affect the overall accuracy of the recognition process, so that the same False Acceptance and False Rejection rates are obtained when compared with the non-protected scheme.","PeriodicalId":13079,"journal":{"name":"IEEE Access","volume":"13 ","pages":"155015-155030"},"PeriodicalIF":3.6000,"publicationDate":"2025-09-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=11148490","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Access","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/11148490/","RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}

引用次数: 0

Abstract

This paper proposes an authentication protocol based on post-quantum cryptography and iris recognition. The process uses a modified version of the original McEliece cryptographic algorithm that provides post-quantum security. Additionally, iris recognition is included in the decryption process, ensuring that only authentic users have access to confidential information, or can operate critical infrastructures or systems that must be protected against malicious users or impostors. A distributed framework, in which several autonomous entities interact with each other, participates in the whole process to reduce the odds of a successful attack. Biometric templates are encrypted and safely stored in a database. These templates meet all requirements described in the ISO/IEC 24745 standard regarding data protection. Due to the homomorphic property of McEliece, the decryption process operates using the encrypted version of these biometric templates, ensuring that critical information is not revealed. The use of McEliece does not affect the overall accuracy of the recognition process, so that the same False Acceptance and False Rejection rates are obtained when compared with the non-protected scheme.

查看原文本刊更多论文

基于虹膜识别和同态加密的后量子认证框架

提出了一种基于后量子密码和虹膜识别的身份认证协议。该过程使用了原始McEliece加密算法的修改版本，该算法提供了后量子安全。此外，虹膜识别包含在解密过程中，确保只有真实的用户才能访问机密信息，或者可以操作必须防止恶意用户或冒名顶替者的关键基础设施或系统。一个分布式框架，其中多个自治实体相互交互，参与整个过程，以减少成功攻击的几率。生物特征模板被加密并安全地存储在数据库中。这些模板符合ISO/IEC 24745标准中关于数据保护的所有要求。由于McEliece的同态特性，解密过程使用这些生物识别模板的加密版本进行操作，确保关键信息不会泄露。使用McEliece不会影响识别过程的整体准确性，因此与非保护方案相比，获得了相同的错误接受率和错误拒绝率。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

IEEE Access COMPUTER SCIENCE, INFORMATION SYSTEMSENGIN-ENGINEERING, ELECTRICAL & ELECTRONIC

CiteScore

9.80

自引率

7.70%

发文量

6673

审稿时长

6 weeks

期刊介绍： IEEE Access® is a multidisciplinary, open access (OA), applications-oriented, all-electronic archival journal that continuously presents the results of original research or development across all of IEEE''s fields of interest. IEEE Access will publish articles that are of high interest to readers, original, technically correct, and clearly presented. Supported by author publication charges (APC), its hallmarks are a rapid peer review and publication process with open access to all readers. Unlike IEEE''s traditional Transactions or Journals, reviews are "binary", in that reviewers will either Accept or Reject an article in the form it is submitted in order to achieve rapid turnaround. Especially encouraged are submissions on: Multidisciplinary topics, or applications-oriented articles and negative results that do not fit within the scope of IEEE''s traditional journals. Practical articles discussing new experiments or measurement techniques, interesting solutions to engineering. Development of new or improved fabrication or manufacturing techniques. Reviews or survey articles of new or evolving fields oriented to assist others in understanding the new area.