融合人脸识别作为登录因子的PKI身份认证系统的研究和设计

发布时间：2018-05-19 18:32

本文选题：身份认证 + 人脸识别　；参考：《太原理工大学》2017年硕士论文

【摘要】：近年来,互联网和计算机应用飞速向前发展,电子身份认证技术成为保证网络应用安全的重要手段。在电子身份认证技术中,基于PKI(公钥密码基础设施)技术以USBKEY为认证介质的身份认证方法是一种值得信赖且常见的身份认证技术,但基于USBKEY的认证方法也存在一些不足:一是认证介质存在转借、盗用或滥用的问题;二是认证介质存在丢失风险,如证书不及时撤销可能带来安全隐患;三是不能证明用户亲自到场操作。同时,基于人脸的生物识别认证也是目前使用比较多的技术,它通过用户唯一的生物特征来认证实体身份,用户必须亲自到场才能完成认证,但这种认证方式也存在不足:一是在身份认证过程中,生物特征在网络中传递存在被攻击者窃取、重放攻击的安全风险;二是生物特征识别技术不能提供加密、完整性保护等较为全面的安全防护。本文对PKI技术和人脸生物识别技术进行了研究,在PKI身份认证系统中融入人脸生物识别作为认证因子,一方面通过融入人脸生物识别,增加了对用户到场操作的认证能力,提高了身份认证的真实可信性;另一方面,通过人脸生物特征动态索引和下载用户证书和密钥,减少了密钥失密风险,增强了介质抗丢失能力,降低了介质管控要求,提高了用户使用的方便性。融合人脸识别作为认证因子的PKI身份认证系统具有安全、易用、成本低等优点,具有广阔的应用前景。本文所做工作如下:本文以PKI密码认证技术和人脸生物识别技术的研究为基础,设计了融合人脸识别作为认证因子的身份认证系统,首先介绍了系统的拓扑结构和工作原理,完成了系统的体系结构的设计,并对各功能模块进行了说明。然后对系统的安全性做了具体的分析,并验证了公钥密码与生物特征融合的认证方法的可行性。
[Abstract]:In recent years, the Internet and computer applications have developed rapidly, and the electronic identity authentication technology has become an important means to ensure the security of network applications. In the electronic identity authentication technology, the identity authentication method based on the PKI (public key cryptography infrastructure) technology with USBKEY as the authentication medium is a trustworthy and common authentication technology, but it is a reliable and common authentication technology. There are also some shortcomings in the authentication method based on USBKEY: first, there are some problems in the authentication medium, such as the existence of the loan, the misuse or misuse; two is the loss risk of the authentication medium, if the certificate is not revoked in time, it may bring security risks; the three is that the user can not prove the operation in person. At the same time, the biometric authentication based on the face is also used at the present time. Many technology, it authenticates entity identity through the unique biometric features of the user, and the user must come to the field in person to complete the authentication, but there are also shortcomings in this authentication method: first, in the process of identity authentication, the biometric features in the network are transmitted by the attacker to steal, replay the security risk of the attack; two is the biological feature recognition technology, It can provide more comprehensive security protection, such as encryption, integrity protection and so on. This paper studies PKI technology and face biometric technology, and integrates face biometrics as authentication factor in PKI identity authentication system. On the one hand, by integrating face biometric recognition, the authentication ability to user arrival operation is increased and identity recognition is improved. On the other hand, through dynamic indexing and downloading of user certificates and keys, the risk of key loss is reduced, the ability to resist the loss of media is reduced, the requirement of media control is reduced, and the convenience of the user is improved. The PKI authentication system with face recognition as a authentication factor is safe and easy to use. With the advantages of low cost and low cost, it has broad application prospects. The work of this paper is as follows: Based on the research of PKI cipher authentication technology and face biometric technology, this paper designs an identity authentication system which combines face recognition as a authentication factor. Firstly, the topology and working principle of the system are introduced, and the system architecture is completed. The structure is designed and the functional modules are explained. Then the security of the system is analyzed in detail, and the feasibility of the authentication method of the fusion of public key cryptography and biological characteristics is verified.
【学位授予单位】：太原理工大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP391.41;TP309

【参考文献】