Abstract:In this writing, we introduce a novel biometric-authenticated key exchange protocol that allows secure and privacy-preserving key establishment between a stateless biometric sensing system and a "smart" user token that possesses biometric templates of the user. The protocol yields a shared secret incorporating random nonce from both parties when they positively authenticate each other. Mutual positive authentication here is defined as when the feature vector calculated from the sensor data captured by the biometric sensing system only differs from the feature vector stored as the biometric template within the user token by less than a predefined threshold. The parties exchange only randomized data and cryptographically derived verifiers; no significant information regarding the vectors is ever exchanged. The protocol essentially utilizes the BBKDF scheme for feature vector matching, and as a result, the threshold is compared per component of the two vectors to be matched. This fact makes it straightforward to employ multiple biometric modalities. The protocol also allows online authentication where the biometric sensing system can potentially send multiple queries derived from different sensor data samples, in one or more rounds. The protocol is designed in such a way that the user token can very efficiently answer a multitude of such queries. This makes the protocol especially suitable for interactive systems while posing a minimal computational burden on the user token. The biometric sensing system can be made stateless, i.e. user registration in advance is not required. Furthermore, the protocol is bidirectionally privacy-preserving in the sense that unless mutual authentication is achieved first, neither the biometric sensing system, nor the user token can gain useful information, respectively regarding the biometric template, or sensor-data-derived feature vectors.

A novel privacy-preserving biometric authentication scheme

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

Authentication Scheme Based on Biometric Encryption

Authentication scheme based on biometric encryption for pervasive computing environments

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Cryptanalysis And Improvement Of A Biometric-Based Multi-Server Authentication And Key Agreement Scheme

oBAKE: an Online Biometric-Authenticated Key Exchange Protocol

Biometrics-Based Authenticated Key Exchange with Multi-Factor Fuzzy Extractor

A New Biometric System Based on Inner-Knuckle-print Recognition

An Improved Biometrics Based Authentication Scheme Using Extended Chaotic Maps for Multimedia Medicine Information Systems

CloudBI: Practical Privacy-Preserving Outsourcing of Biometric Identification in the Cloud

Cryptanalysis and Improvement of a Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments

Achieving Efficient and Privacy-preserving Biometric Identification in Cloud Computing

An Efficient and Privacy-Preserving Biometric Identification Scheme in Cloud Computing

A Framework for the Security and Privacy of Biometric System Constructions under Defined Computational Assumptions

An efficient authentication scheme syncretizing physical unclonable function and revocable biometrics in Industrial Internet of Things

Two-Factor Authenticated Key Exchange from Biometrics with Low Entropy Rates

PTBI: an Efficient Privacy-Preserving Biometric Identification Based on Perturbed Term in the Cloud

Face-based Authentication Using Computational Secure Sketch

BioZero: An Efficient and Privacy-Preserving Decentralized Biometric Authentication Protocol on Open Blockchain