INTEGRATION OF BIOMETRIC AND CHALLENGE RESPONSE AUTHENTICATION

摘要

The present invention relates to a system (100) and method (100a, 300, 500)for a secure biometric authentication based on a two-factor authentication scheme namely challenge-response interaction and zero-knowledge (ZK) computation. The system of the present invention comprises of at least one user (102) and at least one capture apparatus (104) at client-side and at least one server (106) at server-side. The server (106) only stores hashed biometric template while an authenticator key is hidden behind the challenge-response interaction. The challenge-response interaction and ZK computation will result in several computations of authentication and led to comparisons of the hashed biometric template with the presented biometric data.