Secure biometrics: Concepts, authentication architectures, and challenges

IEEE Signal Processing Magazine

Volumn 30, Issue 5, 2013, Pages 51-64

  Rane, Shantanu ^a   Wang, Ye ^a   Draper, Stark C ^b   Ishwar, Prakash ^c  

^a MITSUBISHI ELECTRIC RESEARCH LABORATORIES   (United States)

^b Wisconsin Electric Machines and Power Electronics Consortium   (United States)

^c Boston University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; AUTHENTICATION; CRYPTOGRAPHY;

AUTHENTICATION ARCHITECTURE; BIOMETRIC TEMPLATE PROTECTIONS; CRYPTOGRAPHIC METHODS; IDENTIFICATION NUMBER; IDENTITY VERIFICATION; PHYSICAL CHARACTERISTICS; PRIVACY AND SECURITY; SECURE BIOMETRICS;

BIOMETRICS;

EID: 85032751419     PISSN: 10535888     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2013.2261691     Document Type: Article

References (64)

1. K. Nandakumar, A. K. Jain, and S. Pankanti, "Fingerprint-based fuzzy vault: Implementation and performance," IEEE Trans. Inform. Forensics Sec., vol. 2, no. 4, pp. 744-757, Dec. 2007. (Pubitemid 350157947)
2. A. Nagar, K. Nandakumar, and A. Jain, "Securing fingerprint template: Fuzzy vault with minutiae descriptors," in Proc. Int. Conf. Pattern Recognition, Tampa, FL, Dec. 2008, pp. 1-4.
3. U. Uludag and A. Jain, "Fuzzy fingerprint vault," in Proc. Workshop Biometrics: Challenges Arising from Theory to Practice, Aug. 2004, pp. 13-16.
4. Y. Sutcu, Q. Li, and N. Memon, "Protecting biometric templates with sketch: Theory and practice," IEEE Trans. Inform. Forensics Sec., vol. 2, no. 3, pp. 503-512, Sept. 2007.
5. T. Clancy, N. Kiyavash, and D. Lin, "Secure smartcard-based fingerprint authentication," in Proc. ACM Workshop Biometric Methods and Applications, Berkeley, CA, Nov. 2003, pp. 45-52.
6. S. Yang and I. Verbauwhede, "Automatic secure fingerprint verification system based on fuzzy vault scheme," in Proc. IEEE Int. Conf. Acoustics, Speech, and Signal Processing (ICASSP), Philadelphia, PA, Mar. 2005, vol. 5, pp. 609-612.
7. A. Juels and M. Wattenberg, "A fuzzy commitment scheme," in Proc. ACM Conf. Computer and Communications Security, Nov. 1999, pp. 28-36.
8. A. Juels and M. Sudan, "A fuzzy vault scheme," Designs Codes Cryptogr., vol. 38, no. 2, pp. 237-257, Feb. 2006. (Pubitemid 43102559)
9. S. Draper, A. Khisti, E. Martinian, A. Vetro, and J. Yedidia, "Using distributed source coding to secure fingerprint biometrics," in Proc. IEEE Int. Conf. Acoustics, Speech, and Signal Processing (ICASSP), Honolulu, HI, Apr. 2007, pp. 129-132.
10. Y. Sutcu, S. Rane, J. S. Yedidia, S. C. Draper, and A. Vetro, "Feature extraction for a Slepian-Wolf biometric system using LDPC codes," in Proc. IEEE Int. Symp. Information Theory, Toronto, Canada, July 2008, pp. 2297-2301.
11. Y. Wang, S. Rane, and A. Vetro, "Leveraging reliable bits: ECC considerations in secure biometrics," in Proc. IEEE Workshop Information Forensics and Security, London, U.K., Dec. 2009, pp. 71-75.
12. L. Lai, S. W. Ho, and H. V. Poor, "Privacy-security tradeoff in biometric security systems-Part I: Single use case," IEEE Trans. Inform. Forensics Sec., vol. 6, no. 1, pp. 122-139, Mar. 2011.
13. L. Lai, S. W. Ho, and H. V. Poor, "Privacy-security tradeoff in biometric security systems-Part II: Multiple uses case," IEEE Trans. Inform. Forensics Sec., vol. 6, no. I, pp. 140-151, Mar. 2011.
14. T. Ignatenko and F. M. J. Willems, "Biometric systems: Privacy and secrecy aspects," IEEE Trans. Inform. Forensics Sec., vol. 4, no. 4, pp. 956-973, Dec. 2009.
15. T. Ignatenko and F. M. J. Willems, "Biometric security from an information-theoretical perspective," Found. Trends Commun. Inform. Theory, vol. 7, nos. 2-3, pp. 135-316, Feb. 2012.
16. M. Blanton and P. Gasti, "Secure and efficient protocols for iris and fingerprint identification," in Proc. Eur. Symp. Research Computer Security (ESORICS), Leuven, Belgium, Sept. 2011, vol. 6879, pp. 190-209.
17. M. Barni, T. Bianchi, D. Catalano, M. D. Raimondo, R. D. Labati, P. Failla, D. Fiore, R. Lazzeretti, V. Piuri, F. Scotti, and A. Piva, "Privacy-preserving fingercode authentication," in Proc. ACM Workshop Multimedia and Security (MMSEC), Rome, Italy, Sept. 2010, pp. 231-240.
18. A. Sadeghi, T. Schneider, and I. Wehrenberg, "Efficient privacy-preserving face recognition," in Proc. Int. Conf. Information Security and Cryptology (ICISC '09), Seoul, Korea, pp. 229-244.
19. E. Kelkboom, G. Molina, J. Breebaart, R. Veldhuis, T. Kevenaar, and W. Jonker, "Binary biometrics: An analytic framework to estimate the performance curves under gaussian assumption," IEEE Trans. Syst. Man, Cybern. A, vol. 40, no. 3, pp. 555-571, May 2010.
20. T. M. Cover and J. A. Thomas, Elements of Information Theory. New York: Wiley, 1991.
21. Y. Wang, S. Rane, S. C. Draper, and P. Ishwar, "A theoretical analysis of authentication, privacy and reusability across secure biometric systems," IEEE Trans. Inform. Forensics Sec., vol. 7, no. 6, pp. 1825-1840, Dec. 2012.
22. A. Talwai, F. M. Bui, A. Khisti, and D. Hatzinakos, "A comparative analysis of biometric secret-key binding schemes based on QIM and Wyner-Ziv coding," in Proc. IEEE Int. Conf. Acoustics, Speech and Signal Processing (ICASSP), Prague, Czech Republic, May 2011, pp. 1924-1927.
23. G. Doddington, W. Liggett, A. Martin, M. Przybocki, and D. Reynolds, "Sheep, goats, lambs and wolves: An analysis of individual differences in speaker recognition performance," in Proc. NIST Present. Int. Conf. Spoken Language Processing (IC-SLP), Nov. 1998.
24. D. Maltoni, D. Maio, A. Jain, and S. Prabhakar, Handbook of Fingerprint Recognition. New York: Springer-Verlag, 2003.
25. J. Daugman, "How iris recognition works," IEEE Trans. Circuits Syst. Video Technol., vol. 14, no. 1, pp. 21-30, Jan. 2004.
26. J. Daugman, "Probing the uniqueness and randomness of iriscodes: Results from 200 billion iris pair comparisons," Proc. IEEE, vol. 94, no. 11, pp. 1927-1935, Nov. 2006.
27. W. Zhao, R. Chellappa, P. Phillips, and A. Rosenfeld, "Face recognition: A literature survey," ACM Computing Surv., vol. 35, no. 4, pp. 399-458, 2003.
28. K. Bowyer, K. Chang, and P. Flynn, "A survey of approaches and challenges in 3d and multi-modal 3d + 2d face recognition," Comput. Vis. Image Understand., vol. 101, no. 1, pp. 1-15, Jan. 2006. (Pubitemid 41642085)
29. S. Li and A. Jain, Handbook of Face Recognition. New York: Springer-Verlag, 2011.
30. D. Reynolds and R. Rose, "Robust text-independent speaker identification using gaussian mixture speaker models," IEEE Trans. Speech Audio Processing (1993-2005), vol. 3, no. 1, pp. 72-83, Jan. 1995.
31. N. Boulgouris, D. Hatzinakos, and K. N. Plat aniotis, "Gait recognition: A challenging signal processing technology for biometric identification," IEEE Signal Processing Mag., vol. 22, no. 6, pp. 78-90, 2005. (Pubitemid 46404905)
32. M. Nixon and J. Carter, "Automatic recognition by gait," Proc. IEEE, vol. 94, no. II, pp. 2013-2024, 2006. (Pubitemid 46453642)
33. S. Israel, J. Irvine, A. Cheng, M. Wiederhold, and B. Wiederhold, "ECG to identify individuals," Pattern Recognit., vol. 38, no. 1, pp. 133-142, 2005.
34. A. Vetro, S. C. Draper, S. Rane, and J. S. Yedidia, "Securing biometric data," in Distributed Source Coding, P. L. Dragotti and M. Gastpar, Eds. New York: Academic, 2009, ch. 11.
35. A. Jain, S. Prabhakar, L. Hong, and S. Pankanti, "Fingercode: A filterbank for fingerprint representation and matching," in Proc. IEEE Computer Society Conf. Computer Vision and Pattern Recognition (CVPR), Fort Collins, CO, June 1999, vol. 2.
36. H. Xu, R. Veldhuis, A. Bazen, T. Kevenaar, T. Akkermans, and B. Gokberk, "Fingerprint verification using spectral minutiae representations," IEEE Trans. Inform. Forensics Sec., vol. 4, no. 3, pp. 397-409, 2009.
37. J. Bringer and V. Despiegel, "Binary feature vector fingerprint representation from minutiae vicinities," in Proc. IEEE Int. Conf. Biometrics: Theory, Applications and Systems (BTAS), Washington, DC, Sept. 2010, pp. 1-6.
38. A. Nagar, S. Rane, and A. Vetro, "Privacy and security of features extracted from minutiae aggregates," in Proc. Int. Conf. Acoustics, Speech, and Signal Processing (ICASSP), Dallas, TX, Mar. 2010.
39. R. Cappelli, D. Maio, D. Maltoni, J. Wayman, and A. Jain, "Performance evaluation of fingerprint verification systems," IEEE Trans. Pattern Anal. Mach. Intell., vol. 28, no. 1, pp. 3-18, 2006.
40. Y. Dodis, L. Reyzin, and A. Smith, "Fuzzy extractors: How to generate strong keys from biometrics and other noisy data," in EUROCRYPT (LNCS, vol. 3027). New York: Spr in ger-Verlag, 2004, pp. 523-540.
41. D. Slepian and J. K. Wolf, "Noiseless coding of correlated information sources," IEEE Trans. Inform. Theory, vol. IT-19, no. 4, pp. 471-480, July 1973.
42. B. Chen and G. Wor nell, "Quantization index modulation: A class of provably good methods for digital watermarking and information embedding," IEEE Trans. Inform. Theory, vol. 47, no. 4, pp. 1423-1443, 2001. (Pubitemid 32508483)
43. F. Bui, K. Martin, H. Lu, K. Plataniotis, and D. Hatzinakos, "Fuzzy key binding strategies based on quantization index modulation (QIM) for biometric encryption applications," IEEE Trans. Inform. Forensics Sec., vol. 5, no. 1, pp. 118-132, 2010.
44. J. Massey, "Shift-register synthesis and bch decoding," IEEE Trans. Inform. Theory, vol. 15, no. 1, pp. 122-127, 1969.
45. P. Paillier, "Public-key cryptosystems based on composite degree residuosity classes," in Advances in Cryptology-EUROCRYPT (LNCS, vol. 1592). New York: Springer-Verlag, 1999, pp. 233-238.
46. J. Bringer, H. Chabanne, M. Izabachène, D. Pointcheval, Q. Ta ng, and S. Zimmer, "An application of the Goldwasser-Micali cryptosystem to biometric authentication," in Proc. Aust. Conf. Information Security and Privacy, Townsville, Australia, July 2007, pp. 96-106.
47. S. Rane and P. Boufounos, "Privacy-preserving nearest neighbor methods," IEEE Signal Processing Mag., vol. 30, no. 2, pp. 18-28, Mar. 2013.
48. I. Lagendijk, Z. Erkin, and M. Barni, "Encrypted signal processing for privacy protection," IEEE Signal Processing Mag., vol. 30, no. 1, pp. 82-105, Jan. 2013.
49. A. Menezes, P. van Oorshot, and S. Vanstone, Handbook of Applied Cryptography. Boca Raton, FL: CRC Press, 1996, 816 pp.
50. N. Ratha, J. Connell, and R. Bolle, "Enhancing security and privacy in biometrics-based authentication systems," IBM Syst. J., vol. 40, no. 3, pp. 614-634, 2001. (Pubitemid 32933421)
51. A. Kong, K.-H. Cheung, D. Zhang, M. Kamel, and J. You, "An analysis of biohash-ing and its variants," Pattern Recognit., vol. 39, no. 7, pp. 1359-1368, 2006.
52. A. Teoh, T. Connie, and D. Ngo, "Remarks on BioHash and its mathematical foundation," Inform. Process. Lett., vol. 100, pp. 145-150, 2006. (Pubitemid 44262353)
53. K. Simoens, P. Tuyls, and B. Preneel, "Privacy weakness in biometric sketches," in Proc. 2009 IEEE Symp. Security and Privacy, SP '09, Oakland, CA, pp. 189-203.
54. K. Simoens, B. Yang, X. Zhou, F. Beato, C. Busch, E. Newton, and B. Preneel, "Criteria towards metrics for benchmarking template protection algorithms," in Proc. IAPR Int. Conf. Biometrics (ICB), New Delhi, India, Mar. 2012, pp. 498-505.
55. Information Technology-Security Techniques-Biometric Information Protection, ISO/IE24745, 2011.
56. A. Jain, A. Ross, and S. Pankanti, "Biometrics: A tool for information security," IEEE Trans. Information Forensics and Security, vol. 1, no. 2, pp. 125-143, 2006. (Pubitemid 43824625)
57. C. Gentry, "Computing arbitrary functions of encrypted data," Commun. ACM, vol. 53, no. 3, pp. 97-105, M a r. 2010.
58. M. Van Dijk, C. Gentry, S. Halevi, and V. Vaikuntanathan, "Fully homomorphic encryption over the integers," Advances in Cryptology-EUROCRYPT (LNCS, vol. 6110). Berlin, Heidelberg, Germany: Springer-Verlag, 2010, pp. 24-43.
59. N. Sae-Bae, K. Ahmed, K. Isbister, and N. Memon, "Biometric-rich gestures: A novel approach to authentication on multi-touch devices," in Proc. ACM Conf. Human Factors Computing Systems, Austin, TX, May 2012, pp. 977-986.
60. K. Lai, J. Konrad, and P. Ishwar, "Towards gesture-based user authentication," in Proc. IEEE Advanced Video and Signal-Based Surveillance (AVSS), Beijing, China, Sept. 2012, pp. 282-287.
61. T. Holotyak, S. Voloshynovskiy, O. Koval, and F. Beekhof, "Fast physical object identification based on unclonable features and soft fingerprinting," in Proc. IEEE Int. Conf. Acoustics, Speech and Signal Processing (ICASSP), Prague, Czech Republic, May 2011, pp. 1713-1716.
62. G. E. Suh and S. Devadas, "Physical unclonable functions for device authentication and secret key generation," in Proc. ACM Design Automation Conf., San Diego, CA, June 2007, pp. 9-14. (Pubitemid 47129916)
63. P. Tuyls, B. koric, S. Stallinga, A. Akkermans, and W. Ophey, "Information-theoretic security analysis of physical uncloneable functions," in Proc. Financial Cryptography and Data Security, Roseau, Dominica, Feb. 2005, p. 578.
64. B. koric, P. Tuyls, and W. Ophey, "Robust key extraction from physical unclone-able functions," in Proc. Applied Cryptography and Network Security, New York, June 2005, pp. 99-135.