Biometric security from an information-theoretical perspective

Foundations and Trends in Communications and Information Theory

Volumn 7, Issue 2-3, 2010, Pages 135-316

  Ignatenko, Tanya ^a   Willems, Frans M J ^a  

^a EINDHOVEN UNIVERSITY OF TECHNOLOGY   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

AMOUNT OF INFORMATION; BIOMETRIC AUTHENTICATION SYSTEM; BIOMETRIC SECURITY; BIOMETRIC SYSTEMS; FUNDAMENTAL LIMITS; FUZZY COMMITMENT; REFERENCE DATA; SECRET KEY; THEORETICAL PERFORMANCE; THEORETICAL POINTS;

AUTHENTICATION; BIOMETRICS; INFORMATION THEORY;

SECURITY OF DATA;

EID: 84858252162     PISSN: 15672190     EISSN: 15672328     Source Type: Journal    
DOI: 10.1561/0100000051     Document Type: Review

References (93)

1. R. Ahlswede and I. Csiszár, "Common randomness in information theory and cryptography -part I: Secret sharing," IEEE Transactions on Information Theory, vol. 39, pp. 1121-1132, July 1993.
2. R. Ahlswede and I. Csiszár, "Common randomness in information theory and cryptography -part II: CR capacity," IEEE Transactions on Information Theory, vol. 44, pp. 225-240, January 1998. (Pubitemid 128737891)
3. R. Ang, R. Safavi-Naini, and L. McAven, "Cancelable key-based fingerprint templates," in ACISP, pp. 242-252, 2005. (Pubitemid 41431785)
4. C. H. Bennett, G. Brassard, C. Crepeau, and U. M. Maurer, "Generalized privacy amplification," in IEEE International Symposium on Information Theory, Trondeheim, Norway, 1994.
5. T. Berger, "Multiterminal source coding, the information theory approach to communications," in CISM Courses and Lectures, vol. 229, (G. Longo, ed.), pp. 171-231, Springer-Verlag, 1978.
6. P. Bergmans, "A simple converse for broadcast channels with additive white gaussian noise (corresp.)," IEEE Transactions on Information Theory, vol. 20, no. 2, pp. 279-280, March 1974.
7. C. Berrou, A. Glavieux, and P. Thitimajshima, "Near Shannon limit error-correcting coding and decoding: Turbo-codes," vol. 2, pp. 1064-1070, May 1993.
8. BIOMETRICS, Journal of the International Biometric Society.
9. I. Buhan, J. Doumen, and P. Hartel, "Controlling leakage of biometric information using dithering," in EUSIPCO, 2008.
10. I. Buhan, J. Doumen, P. H. Hartel, Q. Tang, and R. N. J. Veldhuis, "Embedding renewable cryptographic keys into continuous noisy data," in ICICS, pp. 294-310, 2008.
11. P. Campisi, E. Maiorana, M. Prats, and A. Neri, "Adaptive and distributed cryptography for signature biometrics protection," in SPIE Conference on Security, Steganography and Water-Making of Multimedia Contents IX, vol. 6505, San Jose, CA, 2007.
12. C. Chen, R. Veldhuis, T. Kevenaar, and A. Akkermans, "Multi-bits biometric string generation based on the likelihood ratio," in IEEE Computer Society Conference on Computer Vision and Pattern Recognition, Workshop on Biometrics, pp. 1-7, Anchorage, Alaska, US, June 24-28 2008.
13. R. Clarke, "Human identification in information systems: Management challenges and public policy issues," Information Technology and People, vol. 7, no. 4, pp. 6-37, 1994.
14. T. Cover, "A proof of the data compression theorem of Slepain and Wolf for ergodic sources," IEEE Transactions on Information Theory, vol. 22, pp. 226-228, March 1975.
15. T. M. Cover and J. A. Thomas, Elements of Information Theory. New York: John Wiley and Sons Inc., 2nd ed., 2006.
16. I. Csiszár and J. Körner, Information Theory: Coding Theorems for Discrete Memoryless Systems. New York: Academic, 1982.
17. I. Csiszár and P. Narayan, "Common randomness and secret key generation with a helper," IEEE Transactions on Information Theory, vol. 46, no. 2, pp. 344-366, 2000. (Pubitemid 30582727)
18. I. Csiszár and P. Narayan, "Secrecy capacities for multiple terminals," IEEE Transactions on Information Theory, vol. 50, no. 12, pp. 3047-3061, December 2004.
19. J. Daugman, "High confidence visual recognition of persons by a test of statistical independence," IEEE Transactions on Pattern Analysis and Machine Intelligence, vol. 15, no. 11, pp. 1148-1161, November 1993.
20. G. Davida, Y. Frankel, and B. Matt, "On enabling secure applications through off-line biometric identification," in Proceedings of the IEEE 1998 Symposium on Security and Privacy, 1998.
21. G. Davida, Y. Frankel, and B. Matt, "On the relation of error correction and cryptography to an off-line biometric based identification scheme," in Proceedings of WCC99, Workshop on Coding and Cryptography, 1999.
22. D. Denteneer, J. Linnartz, P. Tuyls, and E. Verbitskiy, "Reliable (robust) biometric authentication with privacy protection," in Proceedings of IEEE Benelux Symposium on Information Theory, Veldhoven, The Netherlands, 2003.
23. Y. Dodis, R. Ostrovsky, L. Reyzin, and A. Smith, "Fuzzy extractors: How to generate strong keys from biometrics and other noisy data," SIAM Journal on Computing, vol. 38, no. 1, pp. 97-139, 2008.
24. Y. Dodis, L. Reyzin, and A. Smith, "Fuzzy extractors: How to generate strong keys from biometrics and other noisy data," in Advances in Cryptology -Eurocrypt, 2004.
25. B. Dorizzi, "Biometrics at the frontiers, assessing the impact on society, technical impact of biometrics," European Parliament Committee on Citizens Freedoms and Rights, Justice and Home Affairs (LIBE), Technical Report, 2005.
26. S. C. Draper, A. Khisti, E. Martinian, A. Vetro, and J. S. Yedidia, "Using distributed source coding to secure fingerprint biometrics," in IEEE International Conference on Acoustics, Speech and Signal Processing, vol. 2, pp. 129-132, 2007.
27. G. D. Forney, "Information theory," 1972, course notes (unpublished), Stanford University.
28. R. Gallager, Information Theory and Reliable Communcation. New York: Wiley, 1968.
29. R. G. Gallager, "Low density parity check codes," IRE Transactions on Information Theory, vol. 8, pp. 21-28, January 1962.
30. D. Gündüz, E. Erkip, and H. V. Poor, "Secure lossless compression with side information," in Proceedings of the IEEE Information on Theory Workshop, Porto, Portugal, 2008.
31. F. Hao, R. Anderson, and J. Daugman, "Combining crypto with biometrics effectively," IEEE Transactions on Computers, vol. 55, no. 9, pp. 1081-1088, 2006. (Pubitemid 44263808)
32. S.-W. Ho, "On the interplay between shannon's information measures and reliability criteria," in IEEE International Symposium on Information Theory (ISIT), pp. 154-158, Seoul, Korea, June 28-July 3 2009.
33. W. C. Huffman and V. Pless, Fundamentals of Error-Correcting Codes. New York, NY, USA: Cambridge University Press, 2003.
34. T. Ignatenko, "Secret-key rates and privacy leakage in biometric systems," Ph.D. dissertation, Eindhoven University of Technology, 2009.
35. T. Ignatenko and F. Willems, "Achieving secure fuzzy commitment scheme for optical PUFs," in Proceedings of the International Conference on Intelligent Information on Hiding and Multimedia Signal Processing, September 12-14, 2009, Kyoto, Japan, pp. 1185-1188, 2009.
36. T. Ignatenko and F. Willems, "Biometric systems: Privacy and secrecy aspects," IEEE Transactions on Information Forensics and Security, vol. 4, no. 4, December 2009.
37. T. Ignatenko and F. Willems, "Fundamental limits for biometric identification with a database containing protected templates," in Proceedings of the IEEE International Symposium on Information Theory and its Applications (ISITA), Taichung, Taiwan, October 17-20 2010.
38. T. Ignatenko and F. Willems, "Secret-key and identification rates for biometric identification systems with protected templates," in Proceedings of Symposium on Information on Theory in the Benelux, pp. 337-348, Rotterdam, The Netherlands, May 11-12 2010.
39. A. Jain, R. Bolle, and S. Pankanti, eds., Biometrics: Personal Identification in a Networked Society. Kluwer Academic Publishers, 1999.
40. A. K. Jain, K. Nandakumar, and A. Nagar, "Biometric template security," EURASIP Journal on Advances in Signal Processing, 2008.
41. R. Johannesson and K. S. Zigangirov, Fundamentals of Convolutional Coding. Wiley-IEEE Press, 1999.
42. A. Juels and M. Sudan, "A fuzzy vault scheme," in IEEE International Symposium on Information Theory, p. 408, 2002. (Pubitemid 34965027)
43. A. Juels and M. Wattenberg, "A fuzzy commitment scheme," in ACM Conference on Computer and Communications Security, pp. 28-36, 1999.
44. E. Kelkboom, G. G. Molina, T. Kevenaar, R. Veldhuis, and W. Jonker, "Binary biomterics: An analytic framework to estimate the bit error probability under gaussian assumption," in IEEE International Conference on Biometrics: Theory Applications and Systems (BTAS), pp. 1-6, September-October 2008.
45. T. A. M. Kevenaar, G. J. Schrijen, M. van der Veen, A. H. M. Akkermans, and F. Zuo, "Face recognition with renewable and privacy preserving binary templates," in AutoID, pp. 21-26, 2005. (Pubitemid 44733944)
46. L. Lai, S.-W. Ho, and H. V. Poor, "Privacy-security tradeoffs in reusable biometric security system," in Proceedings of IEEE International Conference on Acoustics, Speech, and Signal Processing (ICASSP), Dallas, TX, March 2010.
47. Q. Li, Y. Sutcu, and N. Memon, "Secure sketch for biometric templates," in Asiacrypt, LNCS, vol. 4284, Shanghai, China, December 2006.
48. J.-P. M. G. Linnartz and P. Tuyls, "New shielding functions to enhance privacy and prevent misuse of biometric templates," in AVBPA, pp. 393-402, 2003.
49. E. Maiorana, M. Martinez-Diaz, P. Campisi, J. Ortega-Garcia, and A. Neri, "Template protection for HMM-based on-line signature authentication," in Computer Vision and Pattern Recognition Works, IEEE Computer Society Conference, pp. 1-6, June 2008.
50. D. Maltoni, D. Maio, A. K. Jain, and S. Prabhakar, Handbook of Fingerprint Recognition. New York: Springer, 2003.
51. U. Maurer, "Secret key agreement by public discussion from common information," IEEE Transactions on Information Theory, vol. 39, pp. 733-742, May 1993.
52. F. Monrose, M. K. Reiter, Q. Li, and S. Wetzel, "Cryptographic key generation from voice," in IEEE Symposium on Security and Privacy, pp. 202-213, 2001. (Pubitemid 32882637)
53. F. Monrose, M. K. Reiter, and S. Wetzel, "Password hardening based on keystroke dynamics," in ACM Conference on Computer and Communications Security, pp. 73-82, 1999. (Pubitemid 32213902)
54. K. Nandakumar, A. Nagar, and A. Jain, "Hardening fingerprint fuzzy vault using password," in ICB07, pp. 927-937, 2007.
55. J. A. O'Sullivan and N. A. Schmid, "Large deviations performance analysis for biometrics recognition," in Proceedings of Annual Allerton Conference on Communication, Control, and Computing, Allerton House Monticello, IL, USA, October 2-4 2002.
56. S. Prabhakar, S. Pankanti, and A. Jain, "Biometric recognition: Security and privacy concerns," Security and Privacy, IEEE, vol. 1, no. 2, pp. 33-42, March-April 2003.
57. V. Prabhakaran and K. Ramchandran, "On secure distributed source coding," IEEE Information on Theory Workshop, pp. 442-447, September 2007.
58. J. Proakis, Digital Communications. McGraw-Hill, 4th ed., (Int.), 2001.
59. N. Ratha, S. Chikkerur, J. Connell, and R. Bolle, "Generating cancelable fingerprint templates," IEEE Transactions on Pattern Analysis and Machine Intelligence, vol. 29, no. 4, pp. 561-572, April 2007. (Pubitemid 46464397)
60. N. K. Ratha, J. H. Connell, and R. M. Bolle, "Enhancing security and privacy in biometrics-based authentication systems," IBM Systems Journal, vol. 40, no. 3, pp. 614-634, 2001. (Pubitemid 32933421)
61. R. Renner and S. Wolf, "Smooth Renyi entropy and its properties," in IEEE International Symposium on Information Theory (ISIT), 2004.
62. A. Rényi, "On measures of entropy and information," in Proceedings of Berkeley Symposium on Mathematics Statistics and Probability, vol. 1, pp. 547-561, 1961.
63. N. A. Schmid and J. A. O'Sullivan, "Performance prediction methodology for biometric systems using a large deviations approach," IEEE Transactions on Signal Processing, vol. 52, no. 10, pp. 3036-3045, October 2004.
64. B. Schneier, "Inside risks: The uses and abuses of biometrics," Communications of the ACM, vol. 42, no. 8, p. 136, 1999.
65. S. Shamai and A. Wyner, "A binary analog to the entropy-power inequality," IEEE Transactions on Information Theory, vol. 36, no. 6, pp. 1428-1430, November 1990.
66. A. Shamir, "How to share a secret," Communications of the ACM, vol. 22, pp. 612-613, 1979.
67. C. E. Shannon, "A mathematical theory of communication," The Bell System Technical Journal, vol. 27, pp. 623-656, 1948.
68. C. E. Shannon, "Communication theory of secrecy systems," The Bell System Technical Journal, vol. 28, pp. 656-715, 1949.
69. A. Smith, "Maintaining secrecy when information leakage is unavoidable," Ph.D. Dissertation, MIT, 2004.
70. Y. Sutcu, Q. Li, and N. Memon, "How to protect biometric templates," in SPIE Conference on Security, Steganography and Water-making of Multimedia Contents IX, vol. 6505, 2007.
71. Y. Sutcu, Q. Li, and N. Memon, "Protecting biometric templates with sketch: Theory and practice," IEEE Transactions on Information Forensic and Security, vol. 2, no. 3, pp. 503-512, September 2007.
72. Y. Sutcu, S. Rane, J. Yedidia, S. Draper, and A. Vetro, "Feature extraction for a slepian-wolf biometric system using ldpc codes," in IEEE International Symposium on Information Theory (ISIT), pp. 2297-2301, Toronto, Canada, July 6-11 2008.
73. A. Teoh, A. Goh, and D. Ngo, "Random multispace quantization as an analytic mechanism for biohashing of biometric and random identity inputs," IEEE Transactions on Pattern Analysis and Machine Intelligence, vol. 28, no. 12, pp. 1892-1901, 2006.
74. E. Tuncel, "Capacity/storage tradeoff in high-dimensional identification systems," pp. 1929-1933, July, 2006.
75. P. Tuyls, A. Akkermans, T. Kevenaar, G.-J. Schrijen, B. A, and R. Veldhuis, "Practical biometric authentication with template protection," in International Conference on Audio-and Video-Based Personal Authentication (AVBPA), pp. 436-446, 2005. (Pubitemid 41423060)
76. P. Tuyls and J. Goseling, "Capacity and examples of template-protecting biometric authentication systems," in ECCV Workshop BioAW, pp. 158-170, 2004.
77. U. Uludag, S. Pankanti, S. Prabhakar, and A. K. Jain, "Biometric cryptosystems: Issues and challenges," Proceedings of the IEEE, vol. 92, no. 6, pp. 948-960, 2004.
78. S. Verdu and D. Guo, "A simple proof of the entropy power inequality," IEEE Transactions on Information Theory, vol. 52, no. 5, pp. 2165-2166, May 2006.
79. S. Verdu and T. S. Han, "A general formula for channel capacity," IEEE Transactions on Information Theory, vol. 40, no. 4, pp. 1147-1157, July 1994.
80. G. S. Vernam, "Cipher printing telegraph systems for secret wire and radio telegraphic communications," Journal of the IEEE, vol. 55, pp. 109-115, 1926.
81. A. Vetro, (moderator), contributors: A. K. Jain, R. Chellappa, S. C. Draper, N. Memon, and P. J. Phillips, "Forum on signal processing for biometric systems," IEEE Signal Processing Magazine, vol. 24, no. 6, pp. 146-152, November 2007. (Pubitemid 350201609)
82. A. J. Viterbi, "Error bounds for convolutional codes and an asymptotically optimum decoding algorithm," IEEE Transactions on Information Theory, vol. 13, pp. 260-269, April 1967.
83. J. Wayman, A. Jain, and D. Maltoni, eds., Biometric Systems: Technology, Design and Performance Evaluation. London: Springer-Verlag, 2005.
84. F. Willems, "Coding theorem for the AWGN channel in terms of jointly typical sequences," in Symposium on Information Theory in the Benelux, pp. 13-18, Houthalen, Belgium, May 25 & 26 1989.
85. F. Willems and T. Ignatenko, "Fundamental limits for biometric identification with a database containing protected templates," in Proceedings of the IEEE Workshop on Information Forensics and Security, pp. 1185-1188, Seattle, U.S.A., December 12-15 2010.
86. F. Willems and T. Ignatenko, "Identification and secret-key generation in biometric systems with protected templates," in Proceedings of the ACM Workshop on Multimedia and Security, pp. 63-66, Rome, Italy, 2010.
87. F. Willems, T. Kalker, J. Goseling, and J.-P. Linnartz, "On the capacity of a biometrical identification system," in Proceedings of 2003 IEEE International Symposium on Information Theory, 2003.
88. F. M. J. Willems and T. Ignatenko, "Quantization effects in biometric systems," in Proceedings of Workshop ITA (Information Theory and its Applications), 8-13 February 2009, San Diego, CA, USA, 2009.
89. J.Wolfowitz, Coding Theorems of Information Theory. Berlin: Springer-Verlag, 1961.
90. A. Wyner and J. Ziv, "A theorem on the entropy of certain binary sequences and applications-I," IEEE Transactions on Information Theory, vol. 19, no. 6, pp. 769-772, November 1973.
91. A. Wyner and J. Ziv, "The rate-distortion function for source coding with side information at the decoder," IEEE Transactions on Information Theory, vol. 22, no. 1, pp. 1-10, January 1976.
92. S. Yang and I. Verbauwhede, "Secure iris verification," in IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), vol. 2, pp. 133-136, 2007.
93. C. Ye, A. Reznik, and Y. Shah, "Extracting secrecy from gaussian random variables," in IEEE International Symposium on Information Theory (ISIT), pp. 2593-2597, Seattle, USA, July 9-14 2006. (Pubitemid 351244572)