Abstract:
A conventional biometric authentication system has been time-consuming and labor-intensive for users since the users are requested to re-register their biometric information. According to an aspect of the present disclosure, a biometric authentication system includes an update value generation unit configured to generate an update value, a first update processing unit configured to update, using the update value, a template generated based on biometric information, and a second update processing unit configured to update, using the update value, a verification key generated along with the template based on the biometric information using the update value.
Abstract:
The client includes a random number generation unit which generates a random number, a concealed information storage unit which stores concealed information generated by concealing registered information and the generated random number using a secret key, and a response computation unit which, on the basis of a challenge transmitted from the server, the collation information input for collation with the registered information, and the concealed information, computes a response corresponding to the challenge and including a concealed index, generated by concealing an index indicating closeness between the registered information and the collation information. The server includes a challenge generation unit which generates the challenge using a public key corresponding to the secret key, and a determination unit which uses the public key and the random number transmitted from the client to determine whether or not the response transmitted from the client corresponds to the challenge.
Abstract:
In a recovery verification system, a template storage unit stores a template acquired by encrypting registration input information being biometric information about a registrant by using a secret key. A random number generation unit generates a random number in response to a request from the client. A protected template generation unit conceals the template by the random number, and transmits a protected template to the client. A determination unit acquires, from the client, information about a concealment index that is acquired by concealing a degree of similarity between registration input information and collation information being biometric information about an authenticated subject and is calculated based on the collation information and the protected template. A determination unit generates an index acquired by decrypting the concealment index by using a public key associated with the secret key and the random number, and performs authentication, based on the index.
Abstract:
A storing information generation apparatus obtains registration information and an identifier capable of identifying the registration information, to generate a first individual key from the common key and the identifier, and to generate storing information obtained by linearly converting the registration information using the common key and the first individual key. A matching information concealment apparatus obtains matching information to generate concealed matching information concealing the matching information using an encryption key. A concealed similarity calculation apparatus calculates a concealed similarity from the storing information and the concealed matching information. A decryption apparatus generates a second individual key from the common key and the identifier, and calculates a similarity between the registration information and the matching information from the concealed similarity, a decryption key corresponding to the encryption key, the common key, and the second individual key.
Abstract:
An information processing system performing highly secure broadcast authentication while reducing a delay until authentication, a communication amount, and a computation amount is provided. A server (100) generates authentication information for transmission data by combining a tag relating to the transmission data and a chain value associated in a chain with transmission order of the transmission data. The tag relating to the transmission data is generated by using a common key. The chain is generated by using a one-way function. A node (200) verifies whether a chain value associated with transmission order of data received in the past is generated or not by applying the one-way function to a chain value extracted by using a tag relating to the received data and authentication information for the received data. The tag relating to the received data is generated by using the common key.
Abstract:
The message authentication system is a message authentication system used in a multihop network and including a server 30 and multiple nodes 1 which transmit data to the server 30. Each of the nodes 1 includes: a tag generation unit 902 which uses a private key shared with the server to calculate a tag as a message authenticator corresponding to the data; and a parity tag generation unit 901 which uses the tag to generate a parity tag composed of parities calculated as error-correcting code. The node 1 generates the parity tag corresponding to the tags created by the node 1 and child nodes of the node 1, and transmits the parity tag to a parent node or the server 30 together with the data.