基於雙重門檻決策的循序型多重生物辨識認證系統

Abstract

資訊安全近年成為企業組織十分重視之領域，透過網路處理任何資料型態，不論是結構化或是非結構化，log紀錄檔、照片、聲音、通訊紀錄或是電子郵件，包括使用者之隱私資訊，對該資訊之保護更是不可忽略。隱私資訊被竊取或濫用，對於商譽等無形資產之損害更是難以想像。例如：iCloud的名人照片被駭客攻擊竊取之事件，暴露出一般身份驗證機制不足，但是蘋果手機iPhone 5s以上其實已具備了多重辨識技術服務，包括人臉辨識、語音辨識、指紋辨識、或鍵盤輸入間隙辨識等生物認證技術，只是沒有一個良好生物辨識技術得以將其整合應用，故本研究為了貼近實際應用，擬提出多輪迴方式驗證方式，透過使用多重辨識技術融合(如帳號、密碼 、指紋 、瞳孔及人臉)之特徵值驗證防範不當連線。設計最佳化演算法達成一個高準確率及低誤判率的多重生物辨識認證系統，且對於驗證時間希望能在一定時間內完成，動態地依據安全性需求提供最佳的生物辨識組合方案，本計畫針對下列議題進行深入研究： 議題I：一個高準確率的多重生物辨識認證系統； 議題II：能夠動態的依據安全性需求提供最佳的生物辨識組合方案； 上述議題將運用數學式建立相關模型成目標式和多項限制式，依使用者只要在循序式的生物辨識機制的其中一個回合，能夠達到第一門檻即可通過，若是低於第二門檻則直接拒絕，若是位於其中，才會需要進行下一階段的生物辨識機制。如此一來，使用者只有在最糟糕的情形下才會需要使用所有系統所提供的生物辨識機制。計畫中除了運用數學模式來描述外，運用現有最佳化技術與自行開發優化演算法來進行分析和驗證，發展以幾何規劃為基礎的集中式與啟發式演算法，且執行相關參數驗證，依此設計一系列實驗、數值分析計算出最佳解或近似最佳解以最有效率及有效果之方式設計該多重生物辨識系統，結合理論與實務應用。

In recent years, business organizations highly regarded in information security issues. We process any type of data whether structure or non-structure through the internet, such as log files, photographs, Voices, Communication records and e-mail. All these data has personal privacy information, so the protection of these data can not be ignore. The stealing and misuse of privacy information will harm company’s goodwill and the loss is hard to evaluate. For example, the hacker attack event in stealing celebrity photos on iCloud shows the insufficient of general identity authentication mechanism. Actually, iPhone 5s could provide several biometrics services include face recognition, voice recognition, fingerprint recognition and keystroke recognition, but there hasn’t exist a good way to intergrate all these biometrics services. Therefore, this paper propose a multi-modal biometrics authentication modal with serial verification in practical applications to avoid improper connection to the systems. This paper design an optimal algorithm to produce an optimal solution of biometrics combination with dynamic security requirements for a shortest authentication time, high-accuracy and low false reject multi-modal biometrics authentication systems. In our paper, we focus on the two issues: Issues 1: A high-accuracy multi-modal biometrics system Issues 2: An optimal combination solution of biometric modality according to dynamic security requirements. Issues of above will use mathematical formula to establish the relevant model to the objective function and constraints. In our model, if user achieve the pass threshold, the system will accept the user; if user can not achieve the, the system will reject the user; only if user between pass threshold and reject threshold have to carry on the next level biometric authentication. User need to use all the biometric mechanism which provided by systems only in the worst-case situation. In addition to use mathematical formula to establish our model, we use exist optimization techniques and self-developed centralized and heuristic optimization algorithm based on Geometric Programming to analysis and verification. According to the design of series experiments and numerical analysis, we want to calculate optimal or near-optimal solutions in most efficiency and effectiveness way for the multi-modal biometrics systems which integrate theory with practice.