Security analysis of smartcard to card reader communications for biometric cardholder authentication
Luciano Rila, Chris J. Mitchell · Royal Holloway Digital Repository (Royal Holloway University of London) · 2002
The use of biometrics, and fingerprint recognition in particular, for cardholder authentication in smart-card systems is growing in popularity. In such a biometrics-based cardholder authentication system, sensitive data may be transferred between the smartcard and the card reader. In this paper we identify and classify possible threats to the communications link between card and card reader during cardholder authentication. We also analyse the impact of these threats. We consider five different architectures and use the threat analysis to indicate the relative security of the various possible architectures.