Privacy–Security Trade-Offs in Biometric Security Systems—Part I: Single Use Case

IEEE Transactions on Information Forensics and Security

Volumn 6, Issue 1, 2011, Pages 122-139

  Lai, Lifeng ^a   Ho, Siu Wai ^b   Poor, H Vincent ^c  

^a University of Arkansas ^*  (United States)

^b UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

^c Princeton University   (United States)

Author keywords

Biometric; information theoretic security; perfect privacy; privacysecurity trade off; side information

Indexed keywords

BIOMETRICS; INFORMATION THEORY; SECURITY SYSTEMS;

BIOMETRIC MEASUREMENTS; BIOMETRIC SECURITY; BIOMETRIC SECURITY SYSTEMS; COMMON RANDOMNESS; EQUIVOCATION RATES; INFORMATION- THEORETIC SECURITIES; SIDE INFORMATION; TRADE OFF;

ECONOMIC AND SOCIAL EFFECTS;

EID: 79951830125     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2010.2098872     Document Type: Article

References (42)

1. L. Lai, S.-W. Ho, and H. V. Poor, "Privacy-security tradeoffs in biometric security systems," in Proc. 46th Annu. Allerton Conf. Communication, Control, and Computing, Monticello, IL, Sep. 23-26, 2008.
2. L. Lai, S.-W. Ho, and H. V. Poor, "An information theoretic framework for biometric security systems," in Proc. Int. Conf. Biometrics, Sassari, Italy, Jun. 2009.
3. A. Ross, J. Shah, and A. K. Jain, "From template to image: Reconstructing fingerprints from minutiae points," IEEE Trans. Pattern Anal. Mach. Intell., vol. 29, no. 4, pp. 544-560, Apr. 2007. (Pubitemid 46464396)
4. Y. Sutcu, Q. Li, and N. Memon, "Protecting biometric templates with sketch: Theory and practice," IEEE Trans. Inf. Forensics Security, vol. 2, no. 3, pp. 503-512, Sep. 2007.
5. Q. Li, Y. Sutcu, and N. Memon, "Secure sketch for biometric templates," in Proc. Asiacrypt, Shanghai, China, Dec. 2006, pp. 99-113.
6. Y. Sutcu, Q. Li, and N. Memon, "Secure biometric templates from fingerprint-face features," in Proc. IEEE Computer Society Workshop on Biometrics, Minneapolis, MN, Jun. 2007.
7. S. Draper, A. Khisti, E. Martinian, A. Vetro, and J. Yedidia, "Using distributed source coding to secure fingerprint biometrics," in Proc. IEEE Int. Conf. Acoustics, Speech, and Signal Processing, Honolulu, HI, Apr. 2007, pp. 129-132.
8. Y. Sutcu, S. Rane, J. S. Yedidia, S. Draper, and A. Vetro, "Feature transformation of biometric templates for secure biometric systems based on error correcting codes," in Proc. IEEE Conf. Computer Vision and Pattern Recognition, Anchorage, AK, June 2008.
9. G. Davida, Y. Frankel, and B. Matt, "On enabling secure applications through off-line biometric identifications," in Proc. IEEE Symp. Securityand Privacy, Oakland, CA, May 1998, pp. 148-157.
10. K. Simoens, P. Tuyls, and B. Preneel, "Privacy weaknesses in biometric sketches," in Proc. IEEE Int. Symp. Security and Privacy, May 2009, pp. 188-203.
11. J. Bringer, H. Chabannea, and B. Kindarji, "The best ofboth worlds: Applying secure sketches to cancelable biometrics," Sci. Comput. Program., vol. 74, pp. 43-51, 2008.
12. N. Ratha, S. Chikkerur, J. Connell, and R. Bolle, "Generating cancelable fingerprint templates," IEEE Trans. Pattern Anal. Mach. Intell., vol. 29, no. 4, pp. 561-572, Apr. 2007. (Pubitemid 46464397)
13. X. Boyen, "Reusable cryptographic fuzzy extractors," in Proc. ACM Conf. Computer and Communications Security, New York, 2004, pp. 82-91, ACM Press. (Pubitemid 40338192)
14. A. Juels and M. Sudan, "A fuzzy vault scheme," in Proc. IEEE Int. Symp. Inform. Theory, Lausanne, Switzerland, Jun./Jul. 2002, pp. 293-297.
15. U. Uludag, S. Pankanti, and A. K. Jain, "Fuzzy vault for fingerprints," Audio-and Video-Based Biometric Person Authentication, pp. 310-319, Jul. 2005. (Pubitemid 41423047)
16. U. Uludag and A. K. Jain, "Securing fingerprint template: Fuzzy vault with helper data," in Proc. IEEE Workshop Privacy Research in Vision, New York, 2006.
17. Y. Dodis, L. Reyzin, and A. Smith, "Fuzzy extractors: How to generate strong keys from biometrics and other noisy data," in Proc. Advances in Cryptology (EUROCRYPT), Interlaken, Switzerland, May 2004, pp. 523-540.
18. G. Cohen and G. Zemor, "The wire-tap channel applied to biometrics," in Proc. IEEE Int. Symp. Inf. Theory and Its Applications, Parma, Italy, Oct. 2004.
19. T. Ignatenko and F. M. J. Willems, "On privacy in secure biometrics authentication systems," in Proc. IEEE Int. Conf. Acoustics, Speech, and Signal Processing, Honolulu, HI, Apr. 2007, pp. 121-124.
20. P. Tuyls and J. Goseling, "Capacity and examples of template-protecting biometric authentication systems," in Biometric Authentication. Berlin, Germany: Springer, 2004, pp. 158-170.
21. A. Nagar, K. Nandakumar, and A. K. Jain, "Biometric template transformation: A security analysis," in Proc. SPIE, Electronic Imaging, Media Forensics and Security, San Jose, Jan. 2010.
22. M. Upmanyu, A. M. Namboodiri, K. Srinathan, and C. V. Jawahar, "Efficient biometric verification in encrypted domain," in Proc. Int. Conf. Biometrics, Sassari, Italy, 2009.
23. P. Tuyls and J. Goseling, Biometric Authentication. Berlin, Germany: Springer, 2004.
24. A. K. Jain, K. Nandakumar, and A. Nagar, "Biometric template security," EURASIP J. Advances Signal Process., pp. 1-17, Jan. 2008.
25. U. M. Maurer, "Secret key agreement by public discussion from common information," IEEE Trans. Inf. Theory, vol. 39, no. 3, pp. 733-742, May 1993.
26. R. Ahlswede and I. Csiszár, "Common randomness in information theory and cryptography, Part I: Secret sharing," IEEE Trans. Inf. Theory, vol. 39, no. 4, pp. 1121-1132, Jul. 1993.
27. R. Ahlswede and I. Csiszár, "Common randomness in information theory and cryptography, Part II: CR capacity," IEEE Trans. Inf. Theory, vol. 44, no. 1, pp. 225-240, Jan. 1998. (Pubitemid 128737891)
28. L. Lai, S.-W. Ho, and H. V. Poor, "Privacy-security trade-offs in biometric security systems\Part II: Multiple uses case," IEEE Trans. Inf. Forensics Security, vol. 6, no. 1, Mar. 2011.
29. I. Csiszár and P. Narayan, "Common randomness and secret key generation with a helper," IEEE Trans. Inf. Theory, vol. 46, no. 2, pp. 344-366, Mar. 2000. (Pubitemid 30582727)
30. T. Ignatenko and F. M. J. Willems, "Privacy leakage in biometric secrecy systems," in Proc. Annu. Allerton Conf. Communication, Control, and Computing, Monticello, IL, Sep. 2008.
31. T. Ignatenko and F. M. J. Willems, "Biometric systems: Privacy and secrecy aspects," IEEE Trans. Inf. Forensics Security, vol. 4, no. 4, pp. 956-973, Dec. 2009.
32. Y. Sutcu, S. Rane, J. S. Yedidia, S. Draper, and A. Vetro, "Feature extraction for a Slepian-Wolf biometric system using LDPC codes," in Proc. IEEEInt. Symp. Inf. Theory, Toronto, Canada, Jul. 2008.
33. S.-W. Ho and R. W. Yeung, "On the discontinuity of the Shannon information measures," IEEE Trans. Inf. Theory, vol. 55, no. 12, pp. 5362-5374, Dec. 2009.
34. W. J. Scheirer and T. E. Boult, "Cracking fuzzy vaults and biometric encryption," in Proc. IEEE Biometrics Symp., Baltimore, MD, Sep. 2007, pp. 1-6.
35. S.-W. Ho, "On the interplay between shannon's information measures and reliability criteria," in Proc. IEEE Int. Symp. Inf. Theory, Seoul, South Keora, Jun./Jul. 2009, pp. 154-158.
36. I. Csiszár and J. Körner, Information Theory: Coding Theorems for Discrete Memoryless Systems. New York: Academic, 1981.
37. T.M.Coverand J. A.Thomas, Elementsof Information Theory. New York: Wiley, 1991.
38. A. D. Wyner, "The wire-tap channel," Bell Syst. Tech. J., vol. 54, pp. 1355-1387, Oct. 1975.
39. P. Gács and J. Körner, "Common information is far less than mutual information,"Probl. Control Inf Theory, vol. 2,pp. 149-162, 1973.
40. H. S. Witsenhausen, "On sequences of pairs of dependent random variables,"SIAMJ. Appl. Math., vol. 28, no. 1, pp. 100-113, Jan. 1975.
41. I. Csiszár and J. Körner, "Broadcast channels with confidential messages,"IEEETrans. Inf. Theory, vol. 24, no. 3, pp. 339-348, May 1978.
42. S.-W. Ho and R. W. Yeung, "The interplay between entropy and variational distance," in Proc. IEEE Int. Symp. Inf. Theory, Nice, France, Jul. 2007, pp. 491-495.