Generating and Sharing Biometrics Based Session Keys for Secure Cryptographic Applications

Crypto-biometric systems, which combine biometrics with cryptographic systems, are gaining more and more attention. Person verification with high degree of assurance offered by biometrics can greatly improve the security of a cryptographic system. In such systems, a stable crypto-biometric key (to be used for cryptography) is derived from biometrics and a strong link between the user identity and the cryptographic keys is established. In this paper, the authors first propose a simple and effective protocol to securely share such crypto-biometric keys. Moreover, they propose another protocol to generate and share session keys which are valid for only one communication session.