On-Line Signature-Based Authentication: Template Security Issues and Countermeasures

Biometrics: Theory, Methods, and Applications

Volumn , Issue , 2009, Pages 497-538

  Campisi, Patrizio ^a   Maiorana, Emanuele ^a   Neri, Alessandro ^a  

^a SAPIENZA UNIVERSITY OF ROME   (Italy)

Author keywords

On line signature based authentication template security issues and countermeasures; Security scalable signature based authentication system using data hiding; Signature based user adaptive fuzzy commitment

Indexed keywords

EID: 71349086903     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1002/9780470522356.ch20     Document Type: Chapter

References (101)

1. A. K. Jain., An introduction to biometric recognition, IEEE Trans. Circuits and Syst. Video Technol. 14(1):4-20, 2004.
2. R. M. Bolle, J. H. Connell, S. Pankati, N. K. Ratha, and A.W. Senior, Guide to Biometrics, Springer, New York, 2004.
3. R. Clarke., Human identification in information systems: Management challenges and public policy issues, Inf. Technol. People 7(4):6-37, 1994.
4. A. K. Jain, R. Bolle, and S. Pankanti, editors, Biometrics: Personal Identification in Networked society, Kluwer Academic Publishers, Norwell, MA, 1999.
5. S. Prabhakar, S. Pankanti, and A. K. Jain, Biometric recognition: Security and privacy concerns, IEEE Secur. Privacy 1:33-42, 2003.
6. M. Faundez-Zanuy, Privacy issues on biometric systems, IEEE Aerosp. Electron. Syst. Mag. 20(2):13-15, 2005.
7. U. K. Biometric Working Group, Biometric security concerns, technical report, CESG, September 2003.
8. D. Maltoni, D. Maio, A. K. Jain, and S. Prabhakar, Handbook of Fingerprint Recognition, Springer-Verlag, Berlin, 2003.
9. U. Uludag, and A. K. Jain, Attacks on biometric systems: A case study in fingerprints, in Proceedings SPIE-EI 200, Security, Seganography and Watermarking of Multimedia Contents VI, San Jose, CA, January 18-22, 2004, pp. 622-633.
10. A. K. Jain, A. Ross, and U. Uludag, Biometric template security: challenges and solutions, in Proceedings of the 13th European Signal Processing Conference (EUSIPCO 2005), Antalya, Turkey, September 2005.
11. C. Roberts., Biometric attack vectors and defences, Comput. Secur. 26(1):14-25, 2006.
12. N. Ratha, J. H. Connell, and R. M. Bolle, An analysis of minutiae matching strength, in Proceedings of the International Conference on Audio and Video-Based Biometric Person Authentication, 2001, pp. 223-228.
13. A. Adler, Can images be regenerated from biometric templates?, Proceedings of the Biometrics Consortium Conference, 2003.
14. J. Galbally, J. Fierrez, and J. Ortega Garcia, Bayesian hill-climbing attack and its application to signature verification, Lecture Notes Comput. Sci. 4642:386-395, 2007.
15. A. Ross, J. Shah, and A. K. Jain, Towards reconstructing fingerprints from minutiae points, in Proceedings of SPIE, Biometric Technology for Human Identification II, Vol. 5779, Orlando, FL, March 2005, pp. 68-80.
16. A. Menezes, P. van Oorschot, and S. Vanstone, Handbook of Applied Cryptography, CRC Press, Boca Raton, FL, 1996.
17. http://www.speedproject.eu/, EU project Signal Processing in the Encrypted Domain, funded in the framework of the IST Programme FET.
18. A. Piva, and S. Katzenbeisser, editors, Signal processing in the encrypted domain, EURASIP Journal on Information Security, Special Issue, October 2007.
19. M. Savvides, B. V. K. Vijaya Kumar, and P. K. Khosla, Cancelable biometric filters for face recognition, in Proceedings of the International Conference on Pattern Recognition, 2004, pp. 922-925.
20. T. Connie, A. B. J. Teoh, M. K. O. Goh, and D. C. L. Ngo., PalmHashing: A novel approach for cancelable biometrics, Inf. Processing Lett. 93(1):1-5, 2005.
21. A. B. J. Teoh, D. C. L. Ngo, and A. Goh., Biohashing: Two factor authentication featuring fingerprint data and tokenised random number, Pattern Recognit. 37(11):2245-2255, 2004.
22. C. S. Chin, A. B. J. Teoh, and D. C. L. Ngo, High security iris verification system based on random secret integration Comput. Vis. Image Understanding 102(2):169-177, 2006.
23. A. B. J. Teoh, D. C. L. Ngo, and A. Goh., Random multispace quantization as an analytic mechanism for BioHashing of biometric and random identity inputs, IEEE Trans. Pattern Anal. Mach. Intell. 28(12):1892-1901, 2006.
24. C. L. Ying, and A. B. J. Teoh, Probabilistic random projections and speaker verification, Lecture Notes Comput. Sci. 4662:445-454, 2007.
25. Y. Wang, and K. N. Plataniotis, Face based biometric authentication with changeable and privacy preservable templates, in IEEE Biometric Symposium, September Baltimore, 2007.
26. R. M. Bolle, J. H. Connell, and N. K. Ratha, Biometric perils and patches, Pattern Recognit. 35:2727-2738, 2002.
27. N. Ratha, S. Chikkerur, J. H. Connell, and R. M. Bolle., Generating cancelable fingerprint templates, IEEE Trans. Pattern Anal. Mach. Intelli. 29(4):561-572, 2007.
28. H. Lee, C. Lee, J. Y. Choi, J. Kim, and J. Kim, Changeable face representations suitable for human recognition, Lecture Notes Comput. Sci. 4662:557-565, 2007.
29. E. Maiorana, M. Martinez-Diaz, P. Campisi, J. Ortega-Garcia, and A. Neri, Template protection for HMM-based on-line signature authentication, CVPR Conference, Workshop on Biometrics, Anchorage, Alaska, 23-28 June 2008.
30. E. Maiorana, P. Campisi, J. Ortega-Garcia, and A. Neri, Cancelable biometrics for HMM-based signature recognition, in IEEE Second International Conference on Biometrics: Theory, Applications and Systems (BTAS), Washington DC, 29 September-1 October 2008.
31. U. Uludag, S. Pankanti, S. Prabhakar, and A. K. Jain., Biometric cryptosystems: issues and challenges, Proc. IEEE 92(6):948-960, 2004.
32. K. Nandakumar, A. K. Jain, and S. Pankati., Fingerprint-based fuzzy vault: Implementation and performance, IEEE Trans. Inf. Forens. Secur. 2(4):744-757, 2007.
33. A. Juels, and M. Wattenberg, A fuzzy commitment scheme, 6th ACM Conference on Computer and Communication Security, 1999, pp. 28-36.
34. A. Juels, and M. Sudan., A fuzzy vault scheme, Des. Codes Cryptogr. 38(2):237-257, 2006.
35. G. Davida, Y. Frankel, B. J. Matt, and R. Peralta, On the relation of error correction and cryptography to an offline biometric based identification scheme, in Proceedings of WCC99,Workshop on Coding and Cryptography, 1999.
36. P. Tuyls, E. Verbitsky, T. Ignatenko, D. Schobben, and T. H. Akkermans, Privacy protected biometric templates: Acoustic ear identification, SPIE Proc. 5404:176-182, 2004.
37. P. Tuyls, A. Akkermans, T. Kevenaar, G. J. Schrijen, A. Bazen, and R. Veldhuis, Practical biometric template protection system based on reliable components, in AVBPA Proceedings, 2005.
38. M. Van der Veen, T. Kevenaar, G.-J. Schrijen, T. H. Akkermans, and F. Zuo, Face biometrics with renewable templates, in SPIE Proceedings on Security, Steganography, and Watermarking of Multimedia Contents, Vol. 6072, 2006.
39. E. J. C. Kelkboom, B. Gökberk, T. A. M. Kevenaar, A. H. M. Akkermans, and M. van der Veen, 3D face: Biometrics template protection for 3D face recognition, Lecture Notes Comput. Sci. 4642:566-573, 2007.
40. P. Campisi, E. Maiorana; M. Gonzalez, and A. Neri, Adaptive and distributed cryptography for signature biometrics protection, in SPIE Proceedings on Security, Steganography, and Watermarking of Multimedia Contents IX, Vol. 6505, 28 January-1 February 2007, San Jose, CA, 2007.
41. E. Maiorana, P. Campisi, and A. Neri, User adaptive fuzzy commitment for signature templates protection and renewability, SPIE Journal of Electronic Imaging, Special Section on Biometrics: Advances in Security, Usability and Interoperability, Vol. 17. No. 1, January-March 2008.
42. T. C. Clancy, N. Kiyavash, and D. J. Lin, Secure smartcard-based fingerprint authentication, ACM SIGMM Workshop on Biometrics Methods and Applications, 2003, pp. 45-52.
43. S. Yang, and I. Verbauwhede, Automatic secure fingerprint verification system based on fuzzy vault scheme, in Proceedings of the ICASSP, 2005, pp. 609-612.
44. U. Uludag, S. Pankati, and A. K. Jain, Fuzzy Vault for Fingerprints, in Proceedings, Audio and Video Based Biometric Person Authentication, 2005, pp. 310-319.
45. M. Freire-Santos, J. Fierrez-Aguilara, and J. Ortega-Garcia, Cryptographic key generation using handwritten signature, in SPIE Defense and Security Symposium, Biometric Technologies for Human Identification, Vol. 6202, 2006, pp. 225-231.
46. M. R. Freire, J. Fierrez, M. Martinez-Diaz, and J. Ortega-Garcia, On the applicability of off-line signatures to the fuzzy vault construction, in Proceedings of the International Conference on Document Analysis and Recognition, ICDAR, September 2007.
47. Y. Cheng Feng and P. C Yuen, Protecting face biometric data on smartcard with reed-solomon code, in Proceedings on Computer Vision and Pattern Recognition Workshop, 2006.
48. D. H. Nyang, and K. H. Lee, Fuzzy face vault: How to implement fuzzy vault with weighted features, Lecture Notes Comput. Sci. 4554:491-496, 2007.
49. Y. J. Lee, K. Bae, S. J. Lee, K. R. Park, and J. Kim, Biometric key binding: Fuzzy vault based on iris images, Lecture Notes on Comput. Sci. 4642:800-808, 2007.
50. F. Monrose, M. K. Reiter, Q. Li, and S. Wetzel, Cryptographic Key generation from voice, in Proceedings of the 2001 IEEE Symposium on Security and Privacy, 2001.
51. A. Goh, and D. C. L. Ngo, Computation of Cryptographic Keys from Face Biometrics, in Lecture Notes in Computer Science. Communications and Multimedia Security, 2003, pp. 1-13.
52. C.Vielhauer,R. Steinmetza, and A. Mayerhöfer, Biometric hash based on statistical features of on-line signatures, in International Conference on Pattern Recognition (ICPR), Vol. 1, 2002, pp. 123-126.
53. C. Vielhauer, and R. Steinmetz, Handwriting: Feature correlation analysis for biometric hashes, EURASIP J. Appl. Signal Processing (Special Issue on Biometric Signal Processing) 4:542-558, 2004.
54. H. Feng, and C. W. Chan, Private key generation from on-line handwritten signatures, Inf. Manage. Comput. Secur. 159-164, 2002.
55. Y.W. Kuan, A. Goh, D. Ngoa, and A. Teoh, Cryptographic keys from dynamic hand-signatures with biometric secrecy preservation and replaceability, in Proceedings of the Fourth IEEE Workshop on Automatic Identification Advanced Technologies, 2005, pp. 27-32.
56. M. R. Freire, J. Fierrez, J. Galbally, and J. Ortega-Garcia, Biometric hashing based on genetic selection and its application to on-line signatures, Lecture Notes Comput. Sci. 4642:1134-1143, 2007.
57. Y. Dodis, L. Reyzina, and A. Smith, Fuzzy extractors: How to generate strong keys from biometrics and other noisy data, in Advances in Cryptology-Eurocrypt Proceedings, 2004.
58. Y. Sutcu, Q. Lia, and N. Memon., Protecting biometric templates with sketch: Theory and practice, IEEE Trans. Inf. Forens. Secur. 2(3):503-512, 2007.
59. I. Cox, M. Miller, J. Bloom, M. Miller, and J. Fridrich, Digital Watermarking and Steganography, 2nd edition, Morgan Kaufmann, San Francisco, 2007.
60. M. Barni, and F. Bartolini, Watermarking Systems Engineering: Enabling Digital Assets Security and Other Applications, Marcel Dekker, New York, 2004.
61. A. K. Jain, and U. Uludag., Hiding biometric data, IEEE Trans. Pattern Anal. Mach. Intelli. 25(11):1494-1498, 2003.
62. N. K. Ratha, J. H. Connell, and R. Bolle, Secure data hiding in wavelet compressed fingerprint images, ACM Multimedia 2000 Workshops Proceedings, 2000, pp. 127-130.
63. S. Pankanti, and M. M. Yeung, Verification watermarks on fingerprint recognition and retrieval, Proc. SPIE 3657:66-78, 1999.
64. A. K. Jain, U. Uludag, and R. L. Hsu, Hiding a face in a fingerprint image, in International Conference on Pattern Recognition, 2002.
65. M. Vatsa, R. Singh, P. Mitra, and A. Noore, Digital watermarking based secure multimodal biometric system, in IEEE Intemational Conference on Systems, Man and Cybernetics, 2004, pp. 2983-2987.
66. A. Giannoula, and D. Hatzinakos, Data hiding for multimodal biometric recognition, in International Symposium on Circuits and Systems (ISCAS), 2004.
67. P. Hennings, M. Savvides, and B. V. K. Vijaya Kumar, Hiding phase-quantized biometrics: A case of steganography for reduced-complexity correlation filter classifiers, in SPIE Proceeedings on Security, Steganography, and Watermarking of Multimedia Contents VII, Vol. 5681, 2005, pp. 465-473.
68. E. Maiorana, P. Campisi, and A. Neri, Multi-level signature based biometric authentication using watermarking, in SPIE Defense and Security, Mobile Multimedia/Image Processing for Military and Security Applications 2007, Vol. 6579, Orlando, FL, 9-13 April 2007.
69. E. Maiorana, P. Campisi, and A. Neri, Biometric signature authentication using radon transform-based watermarking techniques, in IEEE Biometric Symposium, Baltimore, September 2007.
70. S. Katzenbeisser, On the integration of watermarks and cryptography, Lecture Notes Comput. Sci. 2939:50-60, 2004.
71. I. J. Cox, G. Doerr, and T. Furon, Watermarking is not cryptography, Lecture Notes Comput. Sci. 4283:1-15, 2006.
72. R. Plamondon, and G. Lorette., Automatic signature verification and writer identification: The state of the art, Pattern Recognit. 22(2):107-131, 1989.
73. F. Leclerc, and R. Plamondon., Automatic signature verification: The state of the art 1989-1993, IJPRAI 8(3):643-660, 1994.
74. R. Plamondon, and S. N. Srihari., On-line and off-line handwriting recognition: A comprehensive survey, IEEE Trans. Pattern Anal. Mach. Intelli. 22(1):63-84, 2000.
75. G. Dimauro, S. Impedovo, M. G. Lucchese, R. Modugno, and G. Pirlo, Recent advancements in automatic signature verification, in Ninth International Workshop on Frontiers in Handwriting Recognitio, 26-29 October 2004, pp. 179-184.
76. M. Faundez-Zanuy., Signature recognition state-of-the-art, IEEE Aerosp. Electron. Syst. Mag. 20(7):28-32, 2005.
77. H. Lei, and V. Govindaraju, A comparative study on the consistency of features in on-line signature verification, Pattern Recognit. Lett. 15:2483-2489, 2005.
78. A. K. Jain, R. P. W. Duin, and J. Mao., Statistical pattern recognition: A review, IEEE Trans. Pattern Anal. Mach. Intell. 22(1):4-37, 2000.
79. Y. Jonghyon, L. Chulhan, and K. Jaihie, On-line signature verification using temporal shift estimated by the phase of Gabor filter, IEEE Trans. Signal Processing 53(2, Part 2):776-783, 2005.
80. M. Faundez-Zanuy, On-line signature recognition based onVQ-DTW, Pattern Recognit. 40:981-992, 2007.
81. G. Agam, and S. Suresh, Warping-based off-line signature recognition, IEEE Trans. Info. Forens. Secur. 2(3, Part 1):430-437, 2007.
82. A. Kholmatov and B.Yanikoglu., Identity authentication using improved on-line signature verification method, Pattern Recognit. Lett. 26(15):2400-2408, 2005.
83. L. Yang, B. W. Widjaja, and R. Prasad., Application of hidden markov models for signature verification, Pattern Recognit. 28(2):161-170, 1995.
84. J. Fierrez, J. Ortega-Garcia, D. Ramos, and J. Gonzalez-Rodriguez., HMM-based on-line signature verification: Feature extraction and signature modeling, Pattern Recognit. Lett. 28(16):2325-2334, 2007.
85. M. Fuentes, S. Garcia-Salicetti, and B. Dorizzi, On-line signature verification: Fusion of a hidden Markov model and a neural network via a support vector machine, in Eighth International Workshop on Frontiers in Handwriting Recognitio, 6-8 August 2002, pp. 253-258.
86. C. Quek, and R. W. Zhou, Antiforgery: A novel pseudo-outer product based fuzzy neural network driver signature verification system, Pattern Recognit. 23:1795-1816, 2002.
87. N. K. Ratha, J. H. Connell, and R. Bolle., Enhancing security and privacy of biometric-based authentication systems, IBM Systems J. 40(3):614-634, 2001.
88. G. A. P. Cirrone, S. Donadio, S. Guatelli, A. Mantero, B. Mascialino, S. Parlati, M. G. Pia, A. Pfeiffer, A. Ribon, and P. Viarengo., A goodness-of-fit statistical toolkit, IEEE Trans. Nuclear Sci. 51(5):2056-2063, 2004.
89. M. Purser, Introduction to Error-Correcting Codes, Artech House, Boston, 1995.
90. Federal Information Processing (FIP) Standards Publication 180-1, Security Hash Standard, http://www.itl.nist.gov/fipspubs/fip180-1.htm, 1995.
91. V. Rijmen, and E. Oswald, Update on SHA-1, Lecture Notes Comput. Sci. 3376:58-71, 2005.
92. X. Wang, Y. L. Yin, and H. Yu, Finding Collisions in the Full SHA-1, CRYPTO, 2005.
93. C. De Cannière, and C. Rechberger, Finding SHA-1 characteristics: General results and applications, in Advances in Cryptology, ASIACRYPT, Vol. 4284, Springer, Berlin, 2006.
94. A. A. Ross, K. Nandakumar, and A. K. Jain, Handbook of Multibiometrics, Springer 2006, USA.
95. M. Faundez-Zanuy., Data fusion in biometrics, IEEE Aerosp. Electron. Syst. Mag. 20(1):34-38, 2005.
96. J. Fierrez-Aguilar, L. Nanni, J. Lopez-Peñalba, J. Ortega-Garcia, and D. Maltoni, An on-line signature verification system based on fusion of local and global information, in International Conference on Audio and Video-Based Biometric Person Authentication, AVBPA, 2005, pp. 523-532.
97. B. Chen, and G. Wornell., Quantization index modulation: A class of provably good methods for digital watermarking and information embedding, IEEE Trans. Info. Theory 47(4):1423-1443, 2001.
98. S. R. Deans, The Radon Transform and Some of Its Applications, John Wiley & Sons, New York, 1983.
99. M. N. Do, and M. Vetterli., The finite ridgelet transform for image representation, IEEE Trans. Image Processing 12(1):16-28, 2003.
100. P. Campisi, D. Kundur, and A. Neri, Robust digital watermarking in the ridgelet domain, IEEE Signal Processing Lett. 11(10), 2004.
101. L. Mao, H.-Z. Wu, Z.-H. Wei, and Y. Bao, Perceptual digital watermark of images using ridgelet transform, in Third International Conference on Machine Learning and Cybernetics, Shanghai, 2004.