|
|
|
| 2006.11.14 |
|
Framework for IC Card Authentication by Biometrics
Base Module to Authenticate "eLWISE" Card with "e-UBF"
-- Enable Robust Authentication by IC Card with E-Tally (*1) Technology--
NTT Comware Corporation (below, NTT Comware; Head office: Minato-ku, Tokyo; President: Yuhji Imai)
designed a framework for IC card authentication by biometrics and developed a base module which
performs authentication by combining the biometrics solution "e-UBF" and "eLWISE(*2)" card of NTT
Communications Corporation. This base module will be applied to the payment authentication system
with IC card and IC card security package products.
|
 |
[Background]
IC cards are useful as a tool to write and read data, while it is at a risk of theft or lost for
misuse. In addition, as the personal information was only authenticated by passwords, IC cards could
be useless if users forget their passwords. Therefore, the biometrics framework was needed.
However, there were still difficulties of practical use of the card because of issues such as personal
information leakage in the case of loss of IC card if biometric information is stored in the card and
the large volume of data transferred between IC card and IC card reader as well as the time to transfer.
Hence, NTT Comware has designed a framework of IC card authentication by biometrics as a solution
for these issues.
[Technology Overview]
The newly developed base module authenticates eLWISE card with e-UBF (fingerprint authentication).
It electrically sorts the fingerprint information registered by e-UBF into tallies and stores them
into different locations including IC card or the management server. For authentication, it restores
the separately-stored information as a fingerprint authentication data. As the pieces of data stored
separately is not available for analogy of the original fingerprint data, the personal information
leakage is no longer a concern even in the case of loss of IC card. "GFI e-Tally (*3)" with a secret
sharing scheme using the standard deviation is used for implementation of this base module.
[Terminology]
1.E-tally Technology
E-tally is a technology to divide information into several pieces, store them in separate locations
and restore when it is used. It is the technology explicitly stated as the "Transfer of Information"
method in "Standards for Information Security Measures for the Central Government Computer Systems",
which was issued by Information Security Policy Council of National Information Security Center (NICS)
the secretariat.
2.eLWISE IC card
eLWISE is an IC card provided by NTT Communications Corporation.
3.GFI e-Tally
GFI e-Tally is a secret sharing scheme provided by Global Friendship Inc.
(below, GFI; Head office: Shinjyuku-ku, Tokyo; President: Yutaka Yasukura).
[Display at Expo]
The authentication using e-UBF and eLWISE card based on the basic module will be displayed at the
NTT Comware booth at Embedded Technology 2006 which is held at PACIFICO YOKOHAMA from November 15 (Wednesday)
to 17 (Friday), 2006.
*NTT Comware Corporation's patent is pending for IC card authentication technology by biometrics
with the secret sharing scheme.
* GFI e-tally is the registered trademark of GFI.
* Other names of corporations and products are the registered trademark of each corporation.
|
|
|
