Privacy preserving biometric‐based remote authentication with secure processing unit on untrusted server

Abstract

Biometric-based authentication systems offer undeniable benefits to users. However, biometric features are vulnerable to attacks, especially those happening over transmission network or at the stored biometric templates. In this work, we propose a novel biometric-based remote authentication framework to deal with malicious attacks over the transmission channel and at the untrusted server. More concretely, the proposed framework is not only resistant against attacks on the network but also protects biometric templates stored in the untrusted server's database, thanks to the combination of fuzzy commitment protocol and non-invertible transformation techniques. The notable feature as compared to previous biometric based remote authentication framework is its ability to defend the sensitive data against different kinds of insider attacks. The server's administrator is incapable of utilizing information saved in its database to impersonate the clients and deceive the whole system because secure computing in the server is guaranteed by employing a secure coprocessor embedded in the server. In addition, the system performance is maintained with the support of random orthonormal project, which reduces computational complexity while preserving its accuracy. 2 Related works Along with the rapid growth of internet, the remote authentication service was widespread and its security became a topic which has attracted the attention of many researchers. One of the first ideas

Security and Privacy Issues in Deep Learning: A Brief Review

“…They also provide metadata about masking data to the framework to run the anonymization algorithms. Based on the provided policies, the framework executes different algorithms and models (such as k-anonymity, l-diversity, t-closeness) to the dataset and measure the risk as well as the utility of the outputs [48,49]. This process is iterated multiple times, using heuristics to find the optimal result.…”

The Meeting of Acquaintances: A Cost-Efficient Authentication Scheme for Light-Weight Objects with Transient Trust Level and Plurality Approach

“…Future work will create a large set of data that works on the modified protocol. In addition, the association of the authentication process and the different kinds of privacy protection [29,30] are possibilities to support to extend the security capabilities of our protocol, especially with resource-constrained IoT devices. In [31], for example, the authors proposed a scenario related to our protocol that applies cryptographic-based protocol to satisfy desired security requirements of electronic voting and protect privacy, so we can extend the security of the proposed protocol to improve its practical value.…”

“…The number of incoming objects according some defined parameters with ∆max_friend = 7 (a) ∆reputation =[10,30], (b) ∆ reputation = 80…”

A Silent Password Recognition Framework Based on Lip Analysis

“…Another recent methodology that deals with the untrusted server issue was presented in [17]. In that research, a biometric-based authentication framework was proposed to secure biometric features during transmissions and at untrusted servers.…”