An improved three-factor authentication scheme using smart card with biometric privacy protection

Chun-I-Fan and Yi-Hui-Lin proposed a remote three-factor authentication scheme in 2009 based on smart card, password and biometric. The scheme emphasized mainly on the privacy protection of biometrics This paper emphasizes on the flaws of their scheme as well as proposes an improved secure three-factor authentication protocol which addresses the concerns of user's privacy, template protection and trust issues. This protocol is provably secure because it reveals only the identity of the user and no additional information about the user or the biometrics to the server.