Biometric-Authenticated Searchable Encryption

Abstract

We introduce Biometric-Authenticated Keyword Search (BAKS), a novel searchable encryption scheme that relieves clients from managing cryptographic keys and relies purely on client's biometric data for authenticated outsourcing and retrieval of files indexed by encrypted keywords.BAKS utilises distributed trust across two servers and the liveness assumption which models physical presence of the client; in particular, BAKS security is guaranteed even if clients' biometric data, which often has low entropy, becomes public. We formalise two security properties, Authentication and Indistinguishability against Chosen Keyword Attacks, which ensure that only a client with a biometric input sufficiently close to the registered template is considered legitimate and that neither of the two servers involved can learn any information about the encrypted keywords.Our BAKS construction further supports outsourcing and retrieval of files using multiple keywords and flexible search queries (e.g., conjunction, disjunction and subset-type queries). An additional update mechanism allows clients to replace their registered biometrics without requiring re-encryption of outsourced keywords, which enables smooth user migration across devices supporting different types of biometrics.

A Face-Authentication Based Searchable Encryption Scheme For Mobile Device

“…The integration of a bio-key into an encrypted searchable solution is possible. In a previous study in 2020, Gardham et al [30] idescribed a biometric-authenticated keyword search scheme. In Gardham's scheme, the user's biometric data is bound to the ciphertext and trapdoor, resulting in higher computational costs.…”