Method and system for biometric single sign-on authentication via homomorphic hash based message authentication code

Abstract

The present disclosure provides biometric single sign-on authentication via homomorphic hash based message authentication code (HMAC). Conventional methods fails to provide authentication without revealing biometric data. In the present disclosure, when the user initiates a service request, a service provider redirects to an identify provider for authentication. Further, user captures and encrypts his/her biometrics using homomorphic HMAC, creating ciphertext. User submits his/her encrypted biometrics to the identity provider for authentication. The identity provider uses template matching algorithms to compare the user submitted encrypted biometrics (fingerprint, iris) with stored templates. The identity provider then transmits authentication result and the corresponding proof of authentication. Further, the service provider re-computes the authentication tag based on the received decrypted authentication result and the secret nonce. Finally, the service provider provides the requested service to the client machine, only if the re-computed authentication tag matches with the associated decrypted proof.