Private key generation from on-line handwritten signatures

doi:10.1108/09685220210436949

Login

Welcome:
Guest

Search for:

Browse:

Resources:

Information Management & Computer Security

ISSN: 0968-5227

Online from: 1993

Subject Area: Information and Knowledge Management

Content: Latest Issue | Latest Issue RSS | Previous Issues

Options: To add Favourites and Table of Contents Alerts please take a Emerald profile

Private key generation from on-line handwritten signatures

Document Information:
Title:	Private key generation from on-line handwritten signatures
Author(s):	Hao Feng, (School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore), Chan Choong Wah, (School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore)
Citation:	Hao Feng, Chan Choong Wah, (2002) "Private key generation from on-line handwritten signatures", Information Management & Computer Security, Vol. 10 Iss: 4, pp.159 - 164
Keywords:	Biometrics, Computer security, Internet
Article type:	Technical paper
DOI:	10.1108/09685220210436949 (Permanent URL)
Publisher:	MCB UP Ltd
Abstract:	n recent years, public key infrastructure (PKI) has emerged as co-existent with the increasing demand for digital security. A digital signature is created using existing public key cryptography technology. This technology will permit commercial transactions to be carried out across insecure networks without fear of tampering or forgery. The relative strength of digital signatures relies on the access control over the individual’s private key. The private key storage, which is usually password-protected, has long been a weak link in the security chain. In this paper, we describe a novel and feasible system – BioPKI cryptosystem – that dynamically generates private keys from users’ on-line handwritten signatures. The BioPKI cryptosystem eliminates the need of private key storage. The system is secure, reliable, convenient and non-invasive. In addition, it ensures non-repudiation to be addressed on the maker of the transaction instead of the computer where the transaction occurs.