arXiv 1008.08072010-08cs.CR

Performance of the Fuzzy Vault for Multiple Fingerprints (Extended Version)

Johannes Merkle, Heinrich Ihmor, Ulrike Korte, Matthias Niesing, Michael Schwaiger

备注：: This article represents the full paper of a short version to appear in the Proceedings of BIOSIG 2010 (copyright of Gesellschaft für Informatik)

英文摘要：

The fuzzy vault is an error tolerant authentication method that ensures the privacy of the stored reference data. Several publications have proposed the application of the fuzzy vault to fingerprints, but the results of subsequent analyses indicate that a single finger does not contain sufficient information for a secure implementation. In this contribution, we present an implementation of a fuzzy vault based on minutiae information in several fingerprints aiming at a security level comparable to current cryptographic applications. We analyze and empirically evaluate the security, efficiency, and robustness of the construction and several optimizations. The results allow an assessment of the capacity of the scheme and an appropriate selection of parameters. Finally, we report on a practical simulation conducted with ten users.

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

阅读原文

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

本文内容

英文摘要相关论文

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

继续探索

相关论文

Security of the Improved Fuzzy Vault Scheme in the Presence of Record Multiplicity (Full Version)

Dodis et al. proposed an improved version of the fuzzy vault scheme, one of the most popular primitives used in biometric cryptosystems, requiring less storage and leaking less information. Recently, Blanton and Aliasgari have shown that the relation of two improved fuzzy vault records of the same individual may be determined by solving a system of non-linear equations. However, they conjectured that this is feasible for small parameters only. In this paper, we present a new attack against the improved fuzzy vault scheme based on the extended Euclidean algorithm that determines if two records …

2014-10-05cs.CR

A Fuzzy-Fuzzy Vault Scheme

In this paper an enhanced fuzzy vault scheme is proposed which we refer to as fuzzy-fuzzy vault scheme. The proposed scheme builds on the classical fuzzy vault by adding the concept of uncertainty and imprecision to the classical scheme. To lock a secret key K in the classical fuzzy vault the locking and unlocking elements are crisp or real elements and consequently the locking and unlocking operations are strict imperative. In the fuzzy-fuzzy vault scheme, Alice locks the secret key K using a set of fuzzy elements that belong to multi-fuzzy set A~ obtained from a universe public set of fuzzy …

2019-05-23cs.CRcs.ITmath.IT

The Fuzzy Vault for fingerprints is Vulnerable to Brute Force Attack

University of Göttingen（哥廷根大学）

The \textit{fuzzy vault} approach is one of the best studied and well accepted ideas for binding cryptographic security into biometric authentication. The vault has been implemented in connection with fingerprint data by Uludag and Jain. We show that this instance of the vault is vulnerable to brute force attack. An interceptor of the vault data can recover both secret and template data using only generally affordable computational resources. Some possible alternatives are then discussed and it is suggested that cryptographic security may be preferable to the one - way function approach to bio…

2007-08-22cs.CRcs.CV

Multi-Biometric Fuzzy Vault based on Face and Fingerprints

secunet Security Networks AG（赛库耐特安全网络股份公司）；Federal Office for Information Security（联邦信息安全办公室）

The fuzzy vault scheme has been established as cryptographic primitive suitable for privacy-preserving biometric authentication. To improve accuracy and privacy protection, biometric information of multiple characteristics can be fused at feature level prior to locking it in a fuzzy vault. We construct a multi-biometric fuzzy vault based on face and multiple fingerprints. On a multi-biometric database constructed from the FRGCv2 face and the MCYT-100 fingerprint databases, a perfect recognition accuracy is achieved at a false accept security above 30 bits. Further, we provide a formalisation o…

2023-01-17cs.CRcs.CV

Securing Iris Templates using Combined User and Soft Biometric based Password Hardened Fuzzy Vault

Personal identification and authentication is very crucial in the current scenario. Biometrics plays an important role in this area. Biometric based authentication has proved superior compared to traditional password based authentication. Anyhow biometrics is permanent feature of a person and cannot be reissued when compromised as passwords. To over come this problem, instead of storing the original biometric templates transformed templates can be stored. Whenever the transformation function is changed new revocable/cancelable templates are generated. Soft biometrics is ancillary information t…

2010-03-07cs.CR

Offline Signature-Based Fuzzy Vault (OSFV: Review and New Results

École de technologie supérieure, Université du Québec（魁北克大学高等技术学院）

An offline signature-based fuzzy vault (OSFV) is a bio-cryptographic implementation that uses handwritten signature images as biometrics instead of traditional passwords to secure private cryptographic keys. Having a reliable OSFV implementation is the first step towards automating financial and legal authentication processes, as it provides greater security of confidential documents by means of the embedded handwritten signatures. The authors have recently proposed the first OSFV implementation which is reviewed in this paper. In this system, a machine learning approach based on the dissimila…

2014-08-18cs.CRcs.CV

更多相关论文收起更多论文

Subspace Fuzzy Vault

Fuzzy vault is a scheme providing secure authentication based on fuzzy matching of sets. A major application is the use of biometric features for authentication, whereby unencrypted storage of these features is not an option because of security concerns. While there is still ongoing research around the practical implementation of such schemes, we propose and analyze here an alternative construction based on subspace codes. This offers some advantages in terms of security, as an eventual discovery of the key does not provide an obvious access to the features. Crucial for an efficient implementa…

2015-04-16cs.CRcs.ITmath.IT

Attacks and Countermeasures in Fingerprint Based Biometric Cryptosystems

We investigate implementations of biometric cryptosystems protecting fingerprint templates (which are mostly based on the fuzzy vault scheme by Juels and Sudan in 2002) with respect to the security they provide. We show that attacks taking advantage of the system's false acceptance rate, i.e. false-accept attacks, pose a very serious risk --- even if brute-force attacks are impractical to perform. Our observations lead to the clear conclusion that currently a single fingerprint is not sufficient to provide a secure biometric cryptosystem. But there remain other problems that can not be resolve…

2013-04-27cs.CR

Discrete Logarithmic Fuzzy Vault Scheme

In this paper a three fuzzy vault schemes which integrated with discrete logarithmic encryption scheme are proposed. In the first scheme, the message m is encoded with discrete logarithmic encryption scheme using randomly generated identity key \k{appa} for every message and then divided into non-overlapping segments. In the second scheme, the message is divided into non-overlapping segments and each segment is encoded with discrete logarithmic encryption scheme using the randomly generated identity key \k{appa}. In the third scheme, the message is divided into non-overlapping segments where e…

2019-05-18cs.CRcs.ITmath.IT

DySign: Dynamic Fingerprinting for the Automatic Detection of Android Malware

The astonishing spread of Android OS, not only in smartphones and tablets but also in IoT devices, makes this operating system a very tempting target for malware threats. Indeed, the latter are expanding at a similar rate. In this respect, malware fingerprints, whether based on cryptographic or fuzzy-hashing, are the first defense line against such attacks. Fuzzy-hashing fingerprints are suitable for capturing malware static features. Moreover, they are more resilient to small changes in the actual static content of malware files. On the other hand, dynamic analysis is another technique for ma…

2017-02-19cs.CR

Lightweight (Reverse) Fuzzy Extractor with Multiple Referenced PUF Responses

A Physical unclonable functions (PUF), alike a fingerprint, exploits manufacturing randomness to endow each physical item with a unique identifier. One primary PUF application is the secure derivation of volatile cryptographic keys using a fuzzy extractor comprising of two procedures: i) secure sketch; and ii) entropy extraction. Although the entropy extractor can be lightweight, the overhead of the secure sketch responsible correcting naturally noisy PUF responses is usually costly. We observe that, in general, response unreliability with respect to a enrolled reference measurement increases …

2018-11-19cs.CR