Affiliations: [a] Cyber Security Engineering Area, Graduate School of Engineering, Osaka University, Japan. E-mail: sunshine.tian86@gmail.com | [b] Computer and Information Science, University of Oregon, USA. E-mail: yingjiul@uoregon.edu | [c] School of Information Systems, Singapore Management University, Singapore. E-mails: robertdeng@smu.edu.sg, binujucse3@gmail.com | [d] School of Computing and Information Technology, University of Wollongong, NSW, Australia. E-mail: gyang@uow.edu.au
Abstract: In this paper, we introduce a new construction of reusable fuzzy signature based remote user authentication that is secure against quantum computers. We investigate the reusability of fuzzy signature, and we prove that the fuzzy signature schemes provide biometrics reusability (aka. reusable fuzzy signature). We define formal security models for the proposed construction, and we prove that it achieves user authenticity and user privacy. The proposed construction ensures: 1) a user’s biometrics can be securely reused in remote user authentication; 2) a third party having access to the communication channel between a user and the authentication server cannot identify the user.
Keywords: Lattice-based cryptography, fuzzy signature, biometrics reusability, user privacy
