Biometric Authentication and Secure Information Services for Wireless Devices

Security concerns have constrained widespread use of small wireless devices for computing. Flaws include the lack of tight over-the-air security in the IEEE 802.11 standard and the lack of strong authentication. While IEEE 802.11 flaws, such as the weak encryption method, are being addressed, strong authentication has not been pursued by wireless vendors. Most current authentication methods rely on passwords, which are not fully secure and require the user to remember cryptic data. Biometric authentication, if highly accurate, would provide strong device security and allow user services to be appropriately restricted. For classified military applications and proprietary enterprise applications, such as legal applications (where the law mandates client-attorney confidentiality) and medical applications (where patient confidentiality must be protected), weak authentication methods are insufficient. Should the device fall into hostile/unauthenticated hands, compromised security could have serious military or legal consequences. The objective of this project is to research state-of-the-art biometric methods and design a software architecture incorporating biometric authentication and offering user and security services based upon valid authentication.