Improving bio-cryptography authentication protocol

User authentication is a method for authenticating a user. Recently there were some authentication method proposed by researchers, such as a method proposed by Seung .etal where the user authentication process was done using biometric (fingerprint) and password. However, this method has weaknesses such as weak against fake user attack, high time complexity, and it is possible for fake device to obtain the fingerprint of the user. In this work, Elliptic Curve and Keccak Hash Function were proposed to solve the problem. The Elliptic Curve is used for conducting device authentication such that there is no possibility for obtaining user fingerprint by unlegitimate device, while Keccak Hash Function is used for improving the user authentication process, such that the authentication process can be succeeded only if both password and fingerprint is authenticated. The result of experiment shows that the user authentication processing time decreased 35.06 ms–41.6 ms compared with the method proposed by Seung .etal, while the probability of obtaining the fingerprint and password using the proposed method is less than the previous method of 2−57. It is proven that the proposed method is strong against fake device attack for stealing the biometric information and password.