1 Biometric Authentication and Multilateral Security

We are currently facing industrial societies turning rapidly into information societies. Computer systems that were previously separated and dedicated to specific tasks become a more and more integrated global information system. The driving force is competition of service providers of all kinds and perhaps the most visible indicator is the convergence of telephone, cell phone and satellite networks, TV cable networks and the Internet. This global system provides a multitude of services and at the same time controls access to services, resources and funds. In order to enforce access authorizations effectively, and also to overcome the notorious disadvantages of passwords and PINs, which need to be memorized, it will become common practice to recognize human individuals biometrically. Biometric technology is already available and will soon be cheap enough to be applied on a large-scale basis. If this leads to an uncontrolled proliferation of biometric data, then not only the privacy of individuals is at serious risk, but democracies as such are so. It may sound paradoxical, but biometric recognition is possible, without individuals giving away their personal biometric data to any device under the control of a verifying organization or corporation. We draft a cryptographic solution based on recent research results. This work focuses less on the biometric techniques themselves, but rather on how the resulting biometric data is handled in the authentication process. Subject descriptor codes: Communications networks (D04), Computer architecture (D05), Encryption (D07), Human computer interaction (D10), Remote sensing (D30), Market application codes: Biosensors (A05), Data/information security (D07), Mobile communications/cellular radio (D25), System security (D30)