Design and analysis of a highly user-friendly, secure, privacy-preserving, and revocable authentication method

IEEE Transactions on Computers

Volumn 63, Issue 4, 2014, Pages 902-916

  Sui, Yan ^a   Zou, Xukai ^a   Du, Eliza Y ^b   Li, Feng ^b  

^a IN 46202 USA   (United States)

^b Indiana University Purdue University Indianapolis   (United States)

Author keywords

Authentication; BioCapsule (BC); biometric cryptosystem (BCS); cancelable biometrics (CB); privacy preserving; secure fusion

Indexed keywords

BIOMETRICS; CRYPTOGRAPHY;

AUTHENTICATION METHODS; BIOCAPSULE (BC); BIOMETRIC CRYPTOSYSTEM; CANCELABLE BIOMETRICS; DESIGN AND ANALYSIS; DESIRABLE FEATURES; PRIVACY PRESERVING; SECURITY AND PRIVACY;

AUTHENTICATION;

EID: 84897140054     PISSN: 00189340     EISSN: None     Source Type: Journal    
DOI: 10.1109/TC.2013.25     Document Type: Article

References (69)

1. http://en.wikipedia.org/wiki/Usability, 2013.
2. http://iris.nist/gov/ice/, 2013.
3. A. Ahmed and I. Traore, "A New Biometric Technology Based on Mouse Dynamics, " IEEE Trans. Dependable and Secure Computing, vol. 4, no. 3, pp. 165-179, July/Sept. 2007. (Pubitemid 47274809)
4. T. Boult, "Robust Distance Measures for Face-Recognition Supporting Revocable Biometric Tokens, " Proc. Seventh Int'l Conf. Automatic Face and Gesture Recognition, pp. 560-566, Apr. 2006.
5. T. Boult, W. Scheirer, and R. Woodworth, "Revocable Fingerprint Biotokens: Accuracy and Security Analysis, " Proc. IEEE Conf. Computer Vision and Pattern Recognition, pp. 1-8, June 2007.
6. X. Boyen, "Reusable Cryptographic Fuzzy Extractors, " Proc. 11th ACM Conf. Computer and Comm. Security (CCS '04), pp. 82-91, 2004. (Pubitemid 40338192)
7. J. Bringer, H. Chabanne, G. Cohen, B. Kindarji, and G. Zemor, "Theoretical and Practical Boundaries of Binary Secure Sketches, " IEEE Trans. Information Forensics and Security, vol. 3, no. 4, pp. 673-683, Dec. 2008.
8. I. Buhan, J. Breebaart, J. Guajardo, K. de Groot, E. Kelkboom, and T. Akkermans, "A Quantitative Analysis of Indistinguishability for a Continuous Domain Biometric Cryptosystem, " Proc. 4th Int'l Workshop, and Second Int'l Conf. Data Privacy Management and Autonomous Spontaneous Security, pp. 78-92, 2010.
9. I. Buhan, J. Doumen, P. Hartel, and R. Veldhuis, "Constructing Practical Fuzzy Extractors Using QIM, " Technical Report TR-CTIT-07-52 2007.
10. R. Cappelli, A. Lumini, D. Maio, and D. Maltoni, "Fingerprint Image Reconstruction from Standard Templates, " IEEE Trans. Pattern Analysis and Machine Intelligence, vol. 29, no. 9, pp. 1489-1503, Sept. 2007. (Pubitemid 47299906)
11. CASIA-IrisV1. http://biometrics.idealtest.org/, 2013.
12. A. Cavoukian and A. Stoianov, "Biometric Encryption, " Encyclopedia of Biometrics. Springer, 2009.
13. E. Chang, R. Shen, and F. Teo, "Finding the Original Point set Hidden Among Chaff, " Proc. ACM Symp. Information, Computer and Comm Security (ASIACCS '06), pp. 182-188, 2006. (Pubitemid 46644737)
14. K. Cheung, A. Kong, D. Zhang, M. Kamel, and J. You, "Revealing the Secret of Facehashing, " Proc. Int'l Conf. Advances in Biometrics, pp. 106-112, 2006. (Pubitemid 43856359)
15. K. Cheung, A. Kong, D. Zhang, M. Kamel, J. You, and H. Lam, "An Analysis on Accuracy of Cancellable Biometrics Based on Biohashing, " Proc. Ninth Int'l Conf. Knowledge-Based Intelligent Information and Eng. Systems (KES '05), pp. 1168-1172, 2005. (Pubitemid 43936218)
16. C. Chin, A. Jin, and D. Ling, "High Security Iris Verification System Based on Random Secret Integration, " Computer Vision and Image Understanding, vol. 102, no. 2, pp. 169-177, May 2006.
17. A. Ciaramella, P. D'Arco, A. De Santis, C. Galdi, and R. Tagliaferri, "Neural Network Techniques for Proactive Password Checking, " IEEE Trans. Dependable and Secure Computing, vol. 3, no. 4, pp. 327-339, Oct./Dec. 2006. (Pubitemid 44837035)
18. J. Dai, J. Feng, and J. Zhou, "Robust and Efficient Ridge-Based Palmprint Matching, " IEEE Trans. Pattern Analysis and Machine Intelligence, vol. 34, no. 8, pp. 1618-1632, Aug. 2012.
19. P. D'Arco and A. De Santis, "On Ultralightweight RFID Authentication Protocols, " IEEE Trans. Dependable and Secure Computing, vol. 8, no. 4, pp. 548-563, July/Aug. 2011.
20. J. Daugman, "How Iris Recognition Works, " IEEE Trans. Circuits and Systems for Video Technology, vol. 14, no. 1, pp. 21-30, Jan. 2004.
21. Y. Dodis, L. Reyzin, and A. Smith, "Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data, " Proc. Advances in Cryptology (Eurocrypt), vol. 3027, pp. 523-540, 2004.
22. Y. Du, R. Ives, D. Etter, and T. Welch, "Use of One-Dimensional Iris Signatures to Rank Iris Pattern Similarities, " Optical Eng., vol. 45, no. 3, 2006.
23. G. Duggan, H. Johnson, and B. Grawemeyer, "Rational Security: Modelling Everyday Password Use, " Int'l J. Human-Computer Studies, vol. 70, no. 6, pp. 415-431, 2012.
24. L. Faria, V. Sa, and S. de Magalhaes, "Multimodal Cognitive Biometrics, " Proc. Sixth Iberian Conf. Information Systems and Technologies (CISTI), pp. 1-6, June 2011.
25. J. Gallier, Discrete Mathematics (Universitext Series). Springer, 2011.
26. J. Hammerle Uhl, E. Pschernig, and A. Uhl, "Cancelable Iris Biometrics Using Block Re-Mapping and Image Warping, " Proc. 12th Int'l Conf. Information Security, pp. 135-142, 2009.
27. F. Hao, R. Anderson, and J. Daugman, "Combining Crypto with Biometrics Effectively, " IEEE Trans. Computers, vol. 55, no. 9, pp. 1081-1088, Sept. 2006. (Pubitemid 44263808)
28. T. Ignatenko and F.M.J. Willems, "Information Leakage in Fuzzy Commitment Schemes, " IEEE Trans. Information Forensics and Security, vol. 5, no. 2, pp. 337-348, June. 2010.
29. A. Jain, K. Nandakumar, and A. Nagar, "Biometric Template Security, " EURASIP J. Advances in Signal Processing, vol. 2008, no. 113, pp. 1-17, 2008.
30. A. Jain, A. Ross, and S. Prabhakar, "An Introduction to Biometric Recognition, " IEEE Trans. Circuits and Systems for Video Technology, vol. 1, no. 1, pp. 4-20, Jan. 2004.
31. A. Jin, D Ling, and A. Goh, "Biohashing: Two Factor Authentication Featuring Fingerprint Data and Tokenized Random Number, " Elsevier Pattern Recognition, vol. 37, pp. 2245-2255, 2004. (Pubitemid 40134555)
32. A. Juels and M. Sudan, "A Fuzzy Vault Scheme, " Designs, Codes and Cryptography, vol. 38, pp. 237-257, 2006. (Pubitemid 43102559)
33. A. Juels and M. Wattenberg, "A Fuzzy Commitment Scheme, " Proc. Sixth ACM Conf. Computer and Comm. Security (CCS '99), pp. 28-36, 1999.
34. H. Jung, K. Park, and J. Kim, "Depth of Capture Volume Extension by Constrained Least Square-Based Image Restoration, Quantitative Evaluation, " Optical Engineering, vol. 49, no. 4, pp. 047004-047004-13, 2010.
35. P. Kahl, "Solving Narrow-Interval Linear Equation Systems Is NP-Hard, " (January 1, 1996). ETD Collection for University of Texas, El Paso. Paper AAIEP04846.
36. D. Karakoyunlu and B. Sunar, "Differential Template Attacks on PUF Enabled Cryptographic Devices, " Proc. IEEE Int'l Workshop Information Forensics and Security (WIFS), pp. 1-6, Dec. 2010.
37. E. Kelkboom, J. Breebaart, T. Kevenaar, I. Buhan, and R. Veldhuis, "Preventing the Decodability Attack Based Cross-Matching in a Fuzzy Commitment Scheme, " IEEE Trans. Information Forensics and Security, vol. 6, no. 1, pp. 107-121, Mar. 2011.
38. A. Kong, K. Cheung, D. Zhang, M. Kamel, and J. You, "An Analysis of Biohashing and Its Variants, " Pattern Recognition, vol. 39, no. 7, pp. 1359-1368, July 2006.
39. L. Masek, "Recognition of Human Iris Patterns for Biometric Identification, " technical report, Univ. of Western Australia, 2003.
40. H.G. Miller and J.L. Fisher, "Requiring Strong Credentials: What's Taking So Long?" IT Professional, vol. 12, no. 1, pp. 57-60, Jan./Feb. 2010.
41. F. Monrose, M. Reiter, and S. Wetzel, "Password Hardening Based on Keystroke Dynamics, " Proc. Sixth ACM Conf. Computer and Comm. Security (CCS '99), pp. 73-82, 1999. (Pubitemid 32213902)
42. A. Nagar, K. Nandakumar, and A. Jain, "A Hybrid Biometric Cryptosystem for Securing Fingerprint Minutiae Templates, " Pattern Recognition Letters, vol. 31, no. 8, pp. 733-741, June 2010.
43. K. Nandakumar, A. Jain, and S. Pankanti, "Fingerprint-Based Fuzzy Vault: Implementation and Performance, " IEEE Trans. Information Forensics and Security, vol. 2, no. 4, pp. 744-757, Dec. 2005.
44. K. Nandakumar, A. Nagar, and A. Jain, "Hardening Fingerprint Fuzzy Vault Using Password, " Proc. Second Int'l Conf. Biometrics, pp. 927-937, Aug. 2007.
45. O. Ouda, N. Tsumura, and T. Nakaguchi, "BioEncoding: A Reliable Tokenless Cancelable Biometrics Scheme for Protecting Iriscodes, " IEICE Trans. Information and Systems, vol. E93-D, no. 7, pp. 1878-1888, July 2010.
46. O. Ouda, N. Tsumura, and T. Nakaguchi, "Tokenless Cancelable Biometrics Scheme for Protecting Iris Codes, " Proc. 20th Int'l Conf. Pattern Recognition (ICPR), pp. 882-885, Aug. 2010.
47. P. Phillips, K. Bowyer, P. Flynn, X. Liu, and W. Scruggs, "The Iris Challenge Evaluation 2005, " Proc. Second IEEE Int'l Conf. Biometrics: Theory, Applications and Systems (BTAS '08), pp. 1-8, Oct. 2008.
48. J. Pillai, V. Patel, R. Chellappa, and N. Ratha, "Secure and Robust Iris Recognition Using Random Projections and Sparse Representations, " IEEE Trans. Pattern Analysis and Machine Intelligence, vol. 33, no. 9, pp. 1877-1893, Sept. 2011.
49. H. Proena and L.A. Alexandre, "Ubiris: A Noisy Iris Image Database, " Proc. 13th Int'l Conf. Image Analysis and Processing, pp. 970-977, 2005. (Pubitemid 43902071)
50. N. Ratha, J. Connell, and R. Bolle, "Enhancing Security and Privacy in Biometrics-Based Authentication Systems, " IBM Systems J., vol. 40, pp. 614-634, 2001. (Pubitemid 32933421)
51. C. Rathgeb and A. Uhl, "An Iris-Based Interval-Mapping Scheme for Biometric Key Generation, " Proc. Sixth Int'l Symp. Image and Signal Processing and Analysis, pp. 511-516, Sept. 2009.
52. C. Rathgeb and A. Uhl, "Adaptive Fuzzy Commitment Scheme Based on Iris-Code Error Analysis, " Proc. Second European Workshop Visual Information Processing (EUVIP), pp. 41-44, July 2010.
53. C. Rathgeb and A. Uhl, "Privacy Preserving Key Generation for Iris Biometrics, " Proc. 11th IFIP TC 6/TC 11 Int'l Conf. Comm. and Multimedia Security, pp. 191-200, 2010.
54. C. Rathgeb and A. Uhl, "Statistical Attack against Iris-Biometric Fuzzy Commitment Schemes, " Proc. IEEE Conf. Computer Vision and Pattern Recognition Workshops (CVPRW), pp. 23-30, June 2011.
55. C. Rathgeb and A. Uhl, "A Survey on Biometric Cryptosystems and Cancelable Biometrics, " EURASIP J. Information Security, vol. 2011, no. 3, pp. 1-25, 2011.
56. K. Revett and S. Tenreiro de Magalhes, "Cognitive Biometrics: Challenges for the Future, " Proc. Sixth Int'l Conf. Global Security, Safety, and Sustainability, pp. 79-86, 2010.
57. A. Ross, K. Nandakumar, and A. Jain, "Introduction to Multi-biometrics, " Handbook of Biometrics, pp. 271-292, Springer, 2008.
58. A. Ross, J. Shah, and A. Jain, "From Template to Image: Reconstructing Fingerprints from Minutiae Points, " IEEE Trans. Pattern Analysis and Machine Intelligence, vol. 29, no. 4, pp. 544-560, Apr. 2007. (Pubitemid 46464396)
59. W. Scheirer and T. Boult, "Cracking Fuzzy Vaults and Biometric Encryption, " Proc. Biometrics Symp., pp. 1-6, Sept. 2007.
60. K. Simoens, P. Tuyls, and B. Preneel, "Privacy Weaknesses in Bio-metric Sketches, " Proc. 30th IEEE Symp. Security and Privacy, pp. 188-203, May 2009.
61. Y. Sui, X. Zou, and E. Du, "Biometrics-Based Authentication: A New Approach, " Proc. 20th Int'l Conf. Computer Comm. and Networks (ICCCN), pp. 1-6, Aug. 2011.
62. K. Takahashi and T. Murakami, "A Metric of Information Gained Through Biometric Systems, " Proc. 20th Int'l Conf. Pattern Recognition (ICPR '10), pp. 1184-1187, 2010.
63. U. Uludag, S. Pankanti, S. Prabhakar, and A. Jain, "Biometric Cryptosystems: Issues and Challenges, " Proc. IEEE, vol. 92, no. 6, pp. 948-960, June 2004.
64. E. Verbitskiy, P. Tuyls, C. Obi, B. Schoenmakers, and B. Skoric, "Key Extraction from General Nondiscrete Signals, " IEEE Trans. Information Forensics and Security, vol. 5, no. 2, pp. 269-279, June 2010.
65. C. Vielhauer, R. Steinmetz, and A. Mayerhoefer, "Biometric Hash Based on Statistical Features of Online Signatures, " Proc. 16th Int'l Conf. Pattern Recognition (ICPR '02), vol. 1, pp. 123-126, 2002. (Pubitemid 44844957)
66. X. Wu, N. Qi, K. Wang, and D. Zhang, "A Novel Cryptosystem Based on Iris Key Generation, " Proc. Fourth Int'l Conf. Natural Computation, vol. 4, pp. 53-56, Oct. 2008.
67. J. Zhang, J. Pu, C. Chen, and R. Fleischer, "Low-Resolution Gait Recognition, " IEEE Trans. Systems, Man, and Cybernetics, Part B: Cybernetics, vol. 40, no. 4, pp. 986-996, Aug. 2010.
68. L. Zhang, Z. Sun, T. Tan, and S. Hu, "Robust Biometric Key Extraction Based on Iris Cryptosystem, " Proc. Third Int'l Conf. Advances in Biometrics (ICB '09), pp. 1060-1069, 2009.
69. Z. Zhou, E. Du, N. Thomas, and E. Delp, "A New Human Identification Method: Sclera Recognition, " IEEE Trans. Systems, Man, and Cybernetics, Part A: Systems and Humans, vol. 42, no. 3, pp. 571-583, May 2012.