【摘要】 针对生物特征模板必然能被破解的可能,基于蜜罐思想设计了具有攻击监测能力的生物特征模板保护方案。在密钥生成时,将真实模板隐藏在蜜罐模板中,构造模板集合和模板索引,分别部署到密钥恢复模块和蜜罐监测模块,实现在密钥使用时主动监测可能存在的模板被破解后的业务应用攻击行为;并且基于指纹模糊保险箱算法对该方案进行了实用化设计与安全性分析。结果表明:所提方法在成熟生物特征模板被动保护的基础上,通过蜜罐模板的叠加防护措施,实现了生物特征模板的主动防护效果,具有一定的工程应用价值。更多还原

【Abstract】 In view of the possibility that biometric template must be cracked, a protection scheme of biometric template with attack monitoring ability based on honeypot technology is designed. The honeypot template set and the honeypot template index are constructed by hiding the real template in the honeypot template when the key is generated.The practical design and security analysis of the scheme are carried out based on the fingerprint Fuzzy Vault safe algorithm. The results show that the proposed method, based on the passive protection of mature biometric templates, achieves the active protection effect of biometric templates through the superposition protection measures of honeypot templates, and has certain engineering application value.更多还原