Affiliations: [a]
School of Computer and Information, Anhui Normal University, Wuhu, China
| [b]
Anhui Province Key Laboratory of Network and Information Security, Wuhu, China
Correspondence:
[*]
Corresponding author. Weixin Bian, School of Computer and Information, Anhui Normal University, No. 189 Jiuhua South Road, Wuhu, Anhui Province 241002, China. E-mail: bwx2353@ahnu.edu.cn.
Abstract: We propose an efficient identity authentication protocol based on cancelable biometric and Physical Uncloable Function (PUF) namely BioP-TAP, which realizes the two-way authentication between the user and the server. Specially, the concept of biometric template protection is added to the proposed protocol to better protect user privacy. We use the properties of PUF to generate the cancelable biometric and adds it to the authentication protocol. Then, we design a complete authentication protocol combining the elliptic curve Pedersen commitment and Zero-knowledge proof. Finally, we adopt the method of combining formalization and non-formalization to carry out scientific evaluation from multiple perspectives. And the performance analysis and comparison with existing schemes are employed to evaluate the proposed scheme, so as to ensure the effectiveness and security. The results show that the proposed method is more effective for security than existing methods, and more suitable for the user biometric authentication in a multi-server environment.
