A non-memorization bio-password scheme with confidence interval sets

We propose bio-password, a novel authentication scheme that improves both the convenience and security of web-site logins through a combination of biometrics and confidence interval sets. Many sites try to prevent weak password choices by enforcing password composition policies, but this can also make it harder for users to remember and generate passwords for different sites. Our proposed scheme provides an efficient solution for generating and managing strong passwords without memorization. We provide experimental results illustrating the efficiency of the proposed scheme and the manner in which it defends against variable attacks.