Post-Quantum Authentication Framework Based on Iris Recognition and Homomorphic Encryption

This paper proposes an authentication protocol based on post-quantum cryptography and iris recognition. The process uses a modified version of the original McEliece cryptographic algorithm that provides post-quantum security. Additionally, iris recognition is included in the decryption process, ensuring that only authentic users have access to confidential information, or can operate critical infrastructures or systems that must be protected against malicious users or impostors. A distributed framework, in which several autonomous entities interact with each other, participates in the whole process to reduce the odds of a successful attack. Biometric templates are encrypted and safely stored in a database. These templates meet all requirements described in the ISO/IEC 24745 standard regarding data protection. Due to the homomorphic property of McEliece, the decryption process operates using the encrypted version of these biometric templates, ensuring that critical information is not revealed. The use of McEliece does not affect the overall accuracy of the recognition process, so that the same False Acceptance and False Rejection rates are obtained when compared with the non-protected scheme.