Privacy-Preserving Cancelable Biometric Authentication Based on RDM and ECC

Abstract

Biometric authentication is getting increasingly popular and demands a wide range of solutions to against increasing cybercrimes and digital identity thefts. This paper proposes a new privacypreserving cancelable biometric authentication key agreement scheme, which improves the existing authentication scheme based on ECC. We are going to integrate the fuzzy commitment and cancelable biometrics to guarantee the security for user's biometric information. The cancelable biometrics named as the random distance method (RDM) which can generate non-invertible and privacy-preserving revocable pseudo-biometric identities. The proposed scheme realizes the mutual authentication of participants, and the privacy of biometric information and also can resist the vast majority of existing attacks. We use the widely accepted BPR adversary model to formally prove the safety features of our scheme. Further, the comparison of other existing related schemes shows that the performance of this scheme has greater advantages in terms of computation cost and communication cost. The experiments demonstrate that this scheme can achieves higher accuracy, while preserving biometric information privacy.

A Novel Length-Flexible Lightweight Cancelable Fingerprint Template for Privacy-Preserving Authentication Systems in Resource-Constrained IoT Applications

“…Kho et al [29] proposed a cancelable fingerprint template design based on the local minutia descriptor and permutated randomized non-negative least square. Wu et al [30] designed a privacy-preserving cancelable pseudotemplate based on a random distance transformation technique. Kavati et al [31] proposed a cancelable fingerprint template protection scheme using elliptical structures guided by fingerprint minutiae.…”

Current Multi-factor of Authentication: Approaches, Requirements, Attacks and Challenges

“…A valuable privacy-preserving research [47] proposed an authentication biometric key agreement based on cancelable biometrics. The proposed scheme integrated fuzzy commitment and Elliptic Curve Cryptography (ECC) cipher to guarantee the security of users' bio-templates against cybercrime thefts.…”

Biometric Template Attacks and Recent Protection Mechanisms: A Survey

“…Other techniques that leverage fixed length templates generation and deep learning for fuzzy vault implementation against false accept attack are the works of Ponce-Hernandez et al [143] and Rathgeb et al [144], respectively. Other than cross-match, brute force, and false accept attacks, bio-cryptosystems have also been utilized to mitigate attacks such as inversion [145,146], known sample [147], and other varieties of attacks [148] that are detrimental to the transmission channels.…”