search

OpenSecEd / auth

A learning module on Authentication
1 stars 1 forks source link

Biometrics #10

Open dbosk opened 7 years ago

dbosk commented 7 years ago

To ensure freshness we need challenge--response. Thus to make biometrics secure (i.e. authenticated) we need challenge--response: we give a challenge to the biometric sensor, which incorporates the challenge into the reported data. It's crucial that you cannot take this challenge and just process it with previously recorded data.

dbosk commented 5 years ago

If the system that wants to authenticate someone has an incorporated device, then freshness is ensured. Then security depends on unclonability of the biometric.