Abstract:Identity authentication has become an essential component for access control in the Internet of Things (IoT) environment. To overcome the inherent weakness of password-based authentication, many present IoT devices (e.g., commercial banking smart cards) are equipped with the fingerprint authentication mechanism. However, due to the resource constraints of IoT devices, oversimplified authentication schemes are deployed, which compromise system performance significantly. Moreover, fingerprint templates in these existing schemes are unprotected. To address these issues, we propose an IoT-oriented privacy-preserving fingerprint authentication system. The proposed system is composed of four main components: 1) minutiae extraction; 2) the minutia cylinder-code (MCC)-based cancelable binary template, generated by the proposed normalized random projection; 3) the lightweight, privacy-preserving template, built by novel pairwise Boolean operations; and 4) fingerprint matching. Our system can effectively mitigate preimage and hill-climbing attacks. A prototype of the proposed system is developed using a popular open-source platform (i.e., Open Virtual Platforms). Comprehensive experimental results on eight benchmark data sets validate the effectiveness of the proposed IoT-oriented fingerprint authentication system. Our system also achieves equivalent authentication accuracy to that of the unprotected fingerprint authentication systems deployed in the resource-rich, non-IoT environment. More importantly, our system prototype is deployable to commercially available low-cost smart cards, such as Atmel AT24C256C Memory Smart Card 256K Bits. To the best of our knowledge, the proposed system is the first privacy-preserving, cancelable fingerprint authentication system developed in such a resource-constrained IoT setting.

Privacy-Preserving Biometric System for Secure Fingerprint Authentication

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

Researche on Design of Biometric Authentication System

Fingerprint-based Authentication in Networking Environment

A novel system for fingerprint privacy protection1.

Privacy Protection in Distributed Fingerprint-based Authentication

A Joint Biometrics and Watermarking Based Framework for Fingerprinting, Copyright Protection, Proof of Ownership, and Security Applications

Privacy Protection of Fingerprint Database

An IoT-oriented Privacy-preserving Fingerprint Authentication System

Exploiting Multimodal Biometrics in E-Privacy Scheme for Electronic Health Records

Homomorphic Encryption-Based Privacy Protection for Palmprint Recognition

Biomapping: Privacy Trustworthy Biometrics Using Noninvertible and Discriminable Constructions

Brain Password: A Secure and Truly Cancelable Brain Biometrics for Smart Headwear.

Fingerprint Combination for Privacy Protection

A Framework for the Security and Privacy of Biometric System Constructions under Defined Computational Assumptions

Privacy issues on biometric systems

Privacy-Preserving Sensor-Based Continuous Authentication and User Profiling: A Review

CloudBI: Practical Privacy-Preserving Outsourcing of Biometric Identification in the Cloud

Face-based Authentication Using Computational Secure Sketch

Efficient and Privacy-Preserving Online Fingerprint Authentication Scheme over Outsourced Data

A cancelable multi-biometric system based on the feature-level fusion of fingerprint and finger vein