Realization of correlation attack against the fuzzy vault scheme

Kholmatov, Alisher; Yanıkoğlu, Berrin

doi:10.1117/12.766861

Cited by 81 publications

(77 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In addition, if the set contains more chaff points, more time is needed to reconstruct the polynomial. The correlation attack (Kholmatov & Yanikoglu, 2008) is known to be an efficient method that constitutes the minutia set using multiple vaults enrolled for different applications. On the other hand, when multiple vaults cannot be obtained and no information about the minutiae is available, the attacker should select the real minutiae from among the entire points including many chaff points.…”

Section: Attack Methods For Fuzzy Fingerprint Vaultmentioning

confidence: 99%

See 1 more Smart Citation

Protection of the Fingerprint Minutiae

Choi¹,

Park²,

Chung³

2011

Recent Application in Biometrics

View full text Add to dashboard Cite

Section: Attack Methods For Fuzzy Fingerprint Vaultmentioning

confidence: 99%

“…In addition, even if the number of the real minutiae is larger than the degree of the polynomial, it would be computationally infeasible to reconstruct the polynomial when there are too many chaff minutiae in the matching minutiae with respect to the real minutiae. (Kholmatov & Yanikoglu, 2008). Fig.…”

Section: Correlation Attackmentioning

confidence: 99%

Protection of the Fingerprint Minutiae

Choi¹,

Park²,

Chung³

2011

Recent Application in Biometrics

View full text Add to dashboard Cite

“…Adler [12] discussed the vulnerability of the method in [11] to the hill climbing attack and the experimental results showed that an estimate of the enrolled biometric image could be regenerated and hence the stored secret could be released assuming that the system leaks information on the matching score. Kholmatov and Yanikoglu [13] realized the correlation attack against the fuzzy vault scheme using fingerprints, and the obtained results proved that the fuzzy vault scheme is indeed vulnerable to correlation attacks. Nagar et al [14] analyzed the security of two well-known cancelable biometrics techniques, namely, distorting transforms for fingerprints [6] and BioHashing [7], and their analysis showed that both techniques are susceptible to invertibility attacks.…”

Section: Introductionmentioning

confidence: 93%

“…As described in [10], given two or more fuzzy vaults generated using the same biometric data and different chaff points, it is possible to recover the true biometric data by correlating the compromised vaults since the only thing in common in these vaults will be the genuine data. Using only two vaults created from the same fingerprint minutiae for 200 different fingers, the correlation attack is realized against fuzzy fingerprint vault in [13] and the experimental results showed that 59% of vaults could be reconstructed successfully. Biometric encryption might be also susceptible to correlation based attacks.…”

Section: Correlation Attacksmentioning

confidence: 99%

On the Security of BioEncoding Based Cancelable Biometrics

Ouda

Tsumura

Nakaguchi

2011

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

SUMMARYProving the security of cancelable biometrics and other template protection techniques is a key prerequisite for the widespread deployment of biometric technologies. BioEncoding is a cancelable biometrics scheme that has been proposed recently to protect biometric templates represented as binary strings like iris codes. Unlike other template protection schemes, BioEncoding does not require user-specific keys or tokens. Moreover, it satisfies the requirements of untraceable biometrics without sacrificing the matching accuracy. However, the security of BioEncoding against smart attacks, such as correlation and optimization-based attacks, has to be proved before recommending it for practical deployment. In this paper, the security of BioEncopding, in terms of both non-invertibility and privacy protection, is analyzed. First, resistance of protected templates generated using BioEncoding against brute-force search attacks is revisited rigorously. Then, vulnerabilities of BioEncoding with respect to correlation attacks and optimization based attacks are identified and explained. Furthermore, an important modification to the BioEncoding algorithm is proposed to enhance its security against correlation attacks. The effect of integrating this modification into BioEncoding is validated and its impact on the matching accuracy is investigated empirically using CASIA-IrisV3-Interval dataset. Experimental results confirm the efficacy of the proposed modification and show that it has no negative impact on the matching accuracy.

show abstract

“…Unfortunately, no assessment on the linkability is given in the cited fuzzy vault paper [NJP07]. The feasibility of linkage attack was proved by Kholmatov et al in [KY08]. The databases and implementation used in their fuzzy vault scheme are not exactly the same as in [NJP07].…”

Section: Comparison Of Unlinkabilitymentioning

confidence: 99%

Privacy and Security Assessment of Biometric Template Protection

Zhou¹

2012

Itit

View full text Add to dashboard Cite

Throughout the ages all those who have been highly successful in great ventures and in the pursuit of great learning must have successfully undergone three stages:"Last night the west wind shriveled the green-clad trees; alone I climb the high tower, to gaze at the road stretching to the horizon" represents the first stage."I have no regrets as my girdle grows looser on my waist; with everlasting love I pine for you" represents the second stage."I have sought her in the crowd a hundred, a thousand times; suddenly turning back my head, I see her under the dimming lanterns" represents the third stage. Erklärung zur DissertationHiermit versichere ich die vorliegende Dissertation selbständig nur mit den angegebenen Quellen und Hilfsmitteln angefertigt zu haben. Alle Stellen, die aus Quellen entnommen wurden, sind als solche kenntlich gemacht. Diese Arbeit hat in gleicher oder ähnlicher Form noch keiner Prüfungsbehörde vorgelegen.Darmstadt, den 4. August 2011 Xuebing Zhou AbstractBiometrics enables convenient authentication based on a person's physical or behavioral characteristics. In comparison with knowledge-or token-based methods, it links an identity directly to its owner. Furthermore, it can not be forgotten or handed over easily. As biometric techniques have become more and more efficient and accurate, they are widely used in numerous areas. Among the most common application areas are physical and logical access controls, border control, authentication in banking applications and biometric identification in forensics.In this growing field of biometric applications, concerns about privacy and security cannot be neglected. The advantages of biometrics can revert to the opposite easily. The potential misuse of biometric information is not limited to the endangerment of user privacy, since biometric data potentially contain sensitive information like gender, race, state of health, etc. Different applications can be linked through unique biometric data. Additionally, identity theft is a severe threat to identity management, if revocation and reissuing of biometric references are practically impossible. Therefore, template protection techniques are developed to overcome these drawbacks and limitations of biometrics. Their advantage is the creation of multiple secure references from biometric data. These secure references are supposed to be unlinkable and non-invertible in order to achieve the desired level of security and to fulfill privacy requirements.The existing algorithms can be categorized into transformation-based approaches and biometric cryptosystems. The transformation-based approaches deploy different transformation or randomization functions, while the biometric cryptosystems construct secrets from biometric data. The integration in biometric systems is commonly accepted in research and their feasibility according to the recognition performance is proved. Despite of the success of biometric template protection techniques, their security and privacy properties are investigated only limitedly.This predomin...

show abstract

Realization of correlation attack against the fuzzy vault scheme

Cited by 81 publications

References 16 publications

Protection of the Fingerprint Minutiae

Protection of the Fingerprint Minutiae

On the Security of BioEncoding Based Cancelable Biometrics

Privacy and Security Assessment of Biometric Template Protection

Contact Info

Product

Resources

About