两种基于生物特征信息的身份签名方案

提出两种基于生物特征信息的身份签名方案。方案一使用签名者的生物特征信息来构造其公钥，验证者不需事先获取签名者的公钥信息，只需由签名者出示其生物特征信息便可重构出其公钥以完成验证操作，使验证操作更加便利直观。方案二使用签名者的生物特征信息来构造其私钥，使私钥的存储不依赖于硬件载体，从根本上避免了私钥的损坏或丢失给签名者带来的损失与不便。上述两种身份签名方案由Dodis等提出的生物特征信息提取算法fuzzy extractor在Liu方案和经典BLS短签名方案的基础上构造。最后，针对上述方案可能存在的攻击提出预防对策。

Two biometric identities based signature schemes

In the first scheme, the signer's public key was constructed from his biometric data. The verifier performed verification successfully by asking signer to show his biometric data, which makes the verifying operation more visible and convenient. In the second scheme, since the private key of the signer was constructed from the biometric data of the signer, it does not need to be placed in hardware, and therefore there is no worry about the loss and inconvenience caused by the fault of the hardware. These two schemes were constructed from the fuzzy extractor method proposed by Dodis, Liu scheme and classical BLS short signature scheme. Finally, two possible attacks on the schemes mentioned above were described and the ways to combat them were suggested.