A robust finger print based two-server authentication and key exchange system

The Biometric based user authentication systems are highly secured and efficient to use and place total trust on the authentication server where bio-metric verification data are stored in a central database. Such systems are, prone to dictionary attacks initiated at the server side. Compromise of the authentication server by either outsiders or insiders do all user private data to exposure and may have serious repercussions to an organization. In this paper, we present a practical fingerprint based user authentication and key exchange system employing a novel two-server architecture. Here, we make use of Image processing techniques to extract a biometric measurement from fingerprint image. In this system, only a front-end service server engages directly with users while a control server stays behind the scene; therefore, can be directly applied to strengthen existing single-server biometric systems without requiring additional computation by the users. In addition, the system is secure against offline dictionary attacks mounted by either of the two servers.