Evaluation of a template protection approach to integrate fingerprint biometrics in a PIN-based payment infrastructure

Electronic Commerce Research and Applications

Volumn 10, Issue 6, 2011, Pages 605-614

  Breebaart, Jeroen ^a   Buhan, Ileana ^b   De Groot, Koen ^c   Kelkboom, Emile ^c  

^a HTC 9   (Netherlands)

^b Riscure ^*  (Netherlands)

^c PHILIPS RESEARCH LABORATORIES   (Netherlands)

Author keywords

ATMs; Authentication; Biometrics; Payment systems; PIN; Point of sale; Smart cards

Indexed keywords

ATMS; AUTHENTICATION INFRASTRUCTURE; AUTOMATED TELLER MACHINES; BIOMETRIC AUTHENTICATION; BIOMETRIC SYSTEMS; FINGERPRINT BIOMETRICS; FINGERPRINT DATABASE; KEY BINDING; MARKET DRIVERS; PAYMENT AUTHENTICATION; PAYMENT SYSTEMS; PIN; POINT OF SALE; TEMPLATE PROTECTION;

AUTHENTICATION; COST REDUCTION; CUSTOMER SATISFACTION; DATA PRIVACY; SALES; SMART CARDS;

BIOMETRICS;

EID: 81155150177     PISSN: 15674223     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.elerap.2011.07.004     Document Type: Article

References (69)

1. Article 29 - Data Protection Working Party. Working Document on Biometrics, 2003. Available at http://ec.europa.eu/justice-home/fsj/privacy/ docs/wpdocs/2003/wp80-en.pdf. Retrieved on May 24, 2008.
2. Banking Automation Bulletin. Equens perspective - biometrics answers call for fast, simple checkout, 2009. Available at http://www.equens.com/Images/ Article/%20biometrics.pdf. Retrieved on October 2009.
3. BBC News. Plastic card fraud goes back up (March 2008). Available at http://news.bbc.co.uk/2/hi/business/7289856.stm. Retrieved on May 2, 2011.
4. Berkman, O.; and Ostrovsky, O. M. The unbearable lightness of PIN cracking. In Proceedings of the 11th International Conference on Financial Cryptography and 1st International Conference on Usable Security, FC'07/USEC'07, Berlin, Heidelberg, 2007, Springer-Verlag, 224-238. ISBN: 3-540-77365-7, 978-3-540-77365-8. Available at http://portal.acm.org/citation.cfm?id=1785594. 1785622. (Pubitemid 351153055)
5. Bhatla, T. P.; Prabhu, V.; and Dua, A. Understanding credit card frauds, June 2003. Available at http://www.popcenter.org/problems/credit/-card/-fraud/ PDFs/Bhatla.pdf. Retrieved on August 17, 2009.
6. Bolle, R. M.; Pankanti, S.; and Ratha, N. K. Evaluation techniques for biometrics-based authentication systems (FRR). International Conference on Pattern Recognition, 2:2831, 2000. doi: http://doi.ieeecomputersociety.org/10. 1109/ICPR.2000.906204.
7. Boyle, M. Let your fingers do the paying. Available at http://money.cnn.com/2006/01/24/magazines/fortune/pluggedinfortunebiometrics/? cnn=yes, January 2006. Retrieved on January 15, 2010.
8. Breebaart, J.; Busch, C.; Grave, J.; and Kindt, E. A reference architecture for biometric template protection based on pseudo identities. In Proceedings of the BIOSIG, Darmstadt, Germany, 2008, 25-38.
9. Breebaart, J.; Akkermans, T.; and Kelkboom, E. Intersubject differences in false nonmatch rates for a fingerprint-based authentication system. EURASIP Journal on Advances in Signal Processing, 2009, Article ID 896383, 2009, 1-9.
10. Busch, C.; Nouak, A.; Zhou, X.; Suchier, J.-M.; Kelkboom, E. J. C.; and Kevenaar, T. 3D face recognition for unattended border control. In Proc. Net-ID 2008 Conference, 2008, 126-136.
11. R. Cappelli, D. Maio, D. Maltoni, J.L. Wayman, and A.K. Jain Performance evaluation of fingerprint verification systems IEEE Transactions on Pattern Analysis and Machine Intelligence 28 1 2006 3 18
12. C. Chen, R.N.J. Veldhuis, T.A.M. Kevenaar, and A.H.M. Akkermans Multi-bits biometric string generation based on the likelihood ratio K.W. Bowyer, P.J. Flynn, V. Govindaraju, N. Ratha, IEEE Conference on Biometrics: Theory, Applications and Systems 2007 University of Notre Dame Washington, DC 1 6
13. Chen, C.; Veldhuis, R.; Kevenaar, T.; and Akkermans, A. Biometric binary string generation with detection rate optimized bit allocation. In IEEE Computer Society Conference on Computer Vision and Pattern Recognition. Workshop on Biometrics, Anchorage, Alaska, June 2008, 1-7.
14. Chen, C.; Veldhuis, R. N. J.; Kevenaar, T. A. M.; and Akkermans, A. H. M. Biometric quantization through detection rate optimized bit allocation. EURASIP Journal on advances in signal processing, Article ID 784834, 2009, 1-16.
15. Coventry, L.; De Angeli, A.; and Johnson, G. Usability and biometric verification at the ATM interface. In Computer Human Interfaces, Ft. Lauderdale, FL, April 5-10, 2003, 153160.
16. Doddington, G.; Liggett, W.; Martin, A.; Przybocki, M.; and Reynolds, D. Sheep, goats, lambs and wolves a statistical analysis of speaker performance in the NIST 1998 speaker recognition evaluation. In International Conference on Spoken Language Processing, 1998.
17. Dodis, Y.; Reyzin, L.; and Smith, A. Fuzzy extractors: How to generate strong keys from biometrics and other noisy data. In C. Cachin, and J. Camenisch (eds.), Advances in Cryptology - EUROCRYPT 2004, Lecture Notes in Computer Science, Vol. 3027, Springer, Berlin, Heidelberg, 2004, 523-540.
18. Y. Dodis, R. Ostrovsky, L. Reyzin, and A. Smith Fuzzy extractors: How to generate strong keys from biometrics and other noisy data SIAM Journal on Computing 38 1 2008 97 139
19. R.O. Duda, and P.E. Hart Pattern Classification and Scene Analysis 1973 Wiley-Interscience New York, NY
20. EDPS. Opinion of the European Data Protection Supervisor on a research project funded by the European Union under the Seventh Framework Programme (FP7) for Research and Technology Development - Turbine (TrUsted Revocable Biometric IdeNtitiEs), February 2011. Available at www.edps.europa.eu/EDPSWEB/webdav/site/ mySite/shared/Documents/Consultation/Opinions/2011/11-02-01-FP7-EN.pdf.
21. ENISA. ATM crime: Overview of the European situation and golden rules on how to avoid it. Technical report, European Network and Information Security Agency (ENISA), August 2009.
22. Europay, Mastercard, VISA (EMVCo). Emv 4.2, June 2008. Available at www.emvco.com/specifications.aspx.
23. European Central Bank. Report on payment statistics, February 2010. Available at sdw.ecb.eu.
24. European Parliament and European Council. Directive 1995/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, 1995.
25. Federal Trade Commission. Consumer sentinel network data book for January-December 2008. Technical report, Federal Trade Commission, February 2009.
26. L. Gong, M.A. Lomas, R.M. Needham, and J.H. Saltzer Protecting poorly chosen secrets from guessing attacks IEEE Journal on Selected Areas in Communications 11 5 1993 648 656
27. Identity Theft Resource Center. Identity theft: The aftermath 2008, June 2009. Available at www.idtheftcenter.org/artman2/uploads/1/Aftermath-2008- 20090520.pdf.
28. International Biometric Group. Financial success for biometrics? Biometric Technology Today, 13, 4, 2005, 9-11.
29. ISO/IEC. 7813:2006 - Information technology: Identification cards - financial transaction cards, 2006.
30. ISO/IEC JTC1 SC27. FDIS 24745 - Information technology - security techniques - biometric information protection, 2010.
31. A.K. Jain, K. Nandakumar, and A. Nagar Biometric template security EURASIP Journal on Advances in Signal Process 113 2008 1 113
32. P. Jones Banking on vein at the ATM Biometric Technology Today 14 5 2006 8 9
33. P. Jones Banking on biometrics Biometric Technology Today 15 4 2007 7 8
34. A. Juels, and M. Sudan A fuzzy vault scheme Designs, Codes and Cryptography 38 2006 237 257 (Pubitemid 43102559)
35. Juels, A.; and Wattenberg, M. A fuzzy commitment scheme. In Proceedings of the 6th ACM Conference on Computer and Communications Security, ACM Press, New York, NY, 1999, 28-36.
36. Kelkboom, E.; Breebaart, J.; Veldhuis, R.; Zhou, X.; and Busch, C. Multi-sample fusion with template protection. In A. Brömme, C. Busch, and D. Hühnlein (eds.), Proceedings of the Special Interest Group on Biometrics and Electronic Signatures, Bonn, Germany, September 17-18, 2009a, 55-67.
37. Kelkboom, E. J. C.; Gökberk, B.; Kevenaar, T. A. M.; Akkermans, A. H. M.; and van der Veen, M. 3D face: Biometric template protection for 3D face recognition. In Proceedings of the International Conference on Biometrics, Seoul, Korea, 2007, 566-573.
38. Kelkboom, E. J. C.; de Groot, K. T. J.; Chen, C.; Breebaart, J.; and Veldhuis, R. N. J. Pitfall of the detection rate optimized bit allocation within template protection and a remedy. In IEEE 3rd International Conference on Biometrics: Theory, Applications and Systems, Washington, DC, 2009b, 1-8.
39. Kelkboom, E. J. C.; Breebaart, J.; Buhan, I.; and Veldhuis, R. N. J. Analytical template protection performance and maximum key size given a gaussian modeled biometric source. In Proceedings of the SPIE Defense, Security and Sensing, Orlando, FL, April 2010.
40. J.P. Linnartz, and P. Tuyls New shielding functions to enhance privacy and prevent misuse of biometric templates J. Kittler, M. Nixon, Audio and Video-based Biometric Person Authentication, Lecture Notes in Computer Science, 2688 2003 Springer Berlin, Heidelberg 1059
41. Logica CMG. E-identity: European attitudes towards biometrics. Whitepaper, Logica CMG, 2006.
42. Maio, D.; Maltoni, D.; Cappelli, R.; Wayman, J. L.; and Jain, A. K. IBG comparative biometric testing - Round 6. Technical report, International Biometric Group, Middlesex, UK, 2006.
43. Mansfield, T.; Kelly, G.; Chandler, D.; and Kane, J. Biometric product testing: Final report. Technical report, Centre for Mathematics and Scientific Computing, National Physics Laboratory, Middlesex, UK, 2001.
44. D.B. McIntosch Biometrics: a fad or the future? Biometric Technology Today 17 5 2009 9 11
45. Modi, S. K.; and Elliott, S. J. Impact of image quality on performance: Comparison of young and elderly fingerprints. In K. Sirlantzis (ed.), Proceedings of the 6th International Conference on Recent Advances in Soft Computing, 2006, 449-454.
46. Moss, D. Collar the lot of us! The biometric delusion, August 2009. Available at http://www.theregister.co.uk/2009/08/14/biometric-id-delusion/.
47. Murdoch, S. J.; Drimer, S.; Anderson, R.; and Bond, M. Chip and PIN is broken. In IEEE Symposium on Security and Privacy, Oakland, CA, May 2010.
48. Nandakumar, K.; Jain, A. K.; and Pankanti, S. Fingerprint-based fuzzy vault: Implementation and performance. In IEEE Transactions on Information Forensics and Security, 2007, 744-757. (Pubitemid 350157947)
49. Ogata, H. Interoperability of biometric transactions in Japanese bank systems. In 1st ASEAN-FBI Meeting, Bangkok, Thailand, June 2009.
50. ORC. Public attitudes toward the uses of biometric identification technologies by government and the private sector, 2001. Available at www.search.org/files/pdf/Biometricsurveyfindings.pdf.
51. Ortega-Garcia, J.; Fierrez-Aguilar, J.; Simon, D.; Gonzalez, M. F. J.; Espinosa, V.; Satue, A.; Hernaez, I.; Igarza, J. J.; Vivaracho, C.; Escudero, D.; and Moro, Q. I. Mcyt baseline corpus: A bimodal biometric database. IEEE Proceedings Vision, Image and Signal Processing, Special Issue on Biometrics on the Internet, 150, 6, December 2003, 395-401.
52. Phillips, P. J.; Flynn, P. J.; Scruggs, T.; Bowyer, K. W.; Chang, J.; Hoffman, K.; Marques, J.; Min, J.; and Worek, W. Overview of the face recognition grand challenge. In IEEE Conference on Computer Vision and Pattern Recognition, 2005, 947-954. (Pubitemid 43897294)
53. Phillips, P. J.; Scruggs, W. T.; O'Toole, A. J.; Flynn, P. J.; Bowyer, K. W.; Schott, C. L.; and Sharpe, M. FRVT 2006 and ICE 2006: Large-scale results. Technical report IR 7408, NIST National Institute of Standards and Technology, 2007.
54. Simon-Zorita, D.; Ortega-Garcia, J.; Sanchez-Asenjo, M.; and Gonzales Rodriguez, J. Minutiae-based enhanced fingerprint verification assessment on image quality factors. In Proceedings of the 2003 International Conference on Image Processing (ICIP), 2, September 2003, 891-894.
55. Tan, L. Fingerprint scan favored in Malaysia, Singapore. May 2007. Available at www.zdnetasia.com/news/security/0,39044215,62011592,00.htm.
56. Tan, L. Citibank Singapore launches biometric payment service. November 2009. Available at www.zdnetasia.com/news/security/0,39044215,61965886,00.htm.
57. The UK Payments Association. 2008 fraud figures announced by APACS, March 2009. Available at www.ukpayments.org.uk/media-centre/press-releases/-/page/ 685/.
58. TNS/TRUSTe. Consumer attitudes about biometrics in ID documents, August 2005. Available at http://www.truste.com/pdf/Biometrics-Study.pdf.
59. Toth, B.; and Mansfield, T. Latest biometric test results - Performance, quality and interoperability. Technical report, Deloitte, 2006.
60. Tuyls, P.; Akkermans, A. H. M.; Kevenaar, T. A. M.; Schrijen, G. J.; Bazen, A. M.; and Veldhuis, R. N. J. Practical biometric authentication with template protection. In Audio and Videobased Biometric Person Authentication, Springer, Berlin, Germany, 2005, 436-446. (Pubitemid 41423060)
61. University of Bologna. FVC2006: The fourth international fingerprint verification competition. 2006. Available at bias.csr.unibo.it/fvc2006/.
62. van Hooren, M. The market needs future proof payment solutions. March 2009. Available at www.equens.com/Images/Futureofpayments.pdf.
63. G.A. von Graevenitz Biometric authentication in relation to payment systems and ATMs Datenschutz und Datensicherheit 31 9 2007 681 683
64. Williams, L. How 'visionary' raised and lost a fortune, 2008. Available at articles.sfgate.com/2008-12-07/news/17134023-1-unpaid-bills-venture-capital- touch.
65. Wittman, M.; Davis, P.; and Flynn, P. Empirical studies of the existence of the biometric menagerie in the FRGC 2.0 color image corpus. Computer Vision and Pattern Recognition Workshop, 0, 33, 2006.
66. Xu, H.; and Veldhuis, R. N. J. Spectral representations of fingerprint minutiae subsets. In Proceedings of the 2009 2nd International Congress on Image and Signal Processing. IEEE Computer Society Press, Los Alamitos, CA, October 2009.
67. H. Xu, R.N.J. Veldhuis, A.M. Bazen, T.A.M. Kevenaar, T.A.H.M. Akkermans, and B. Gökberk Fingerprint verification using spectral minutiae representations IEEE Transactions on Information Forensics and Security 4 3 2009 397 409
68. H. Xu, R.N.J. Veldhuis, T.A.M. Kevenaar, and T.A.H.M. Akkermans A fast minutiae-based fingerprint recognition system IEEE Systems Journal 3 4 2009 418 427
69. Yager, N.; and Dunstone, T. Worms, chameleons, phantoms and doves: New additions to the biometric menagerie. In IEEE Workshop on Automatic Identification Advanced Technologies, Alghero, Italy, 2007, 1-6. (Pubitemid 47487082)