Developing Biometric Encryption Techniques for Securing Biometric Data and Privacy Preserving

Jin Zhe

2013-01-01

Abstract:With the wide deployment of biometric authentication systems, biometric template protection has gained great attention due to security and privacy concerns. A major concern towards the template security is the disclosure of a user’s privacy attributed to the strong correlation between user’s biological identity and corresponding template. Furthermore, users also worry about biometrics is permanently associated with individual, so lost once implies a compromise forever. Due to these major problems, biometric template protection techniques are required to shield the user’s personal information. Cancelable biometrics is one of the approaches for biometric encryption; it refers to the irreversible transform of the biometric template to ensure security and privacy of the actual biometric template. Hence, instead of the original biometric data, only the transformed templates are stored. If a cancelable biometric template is compromised, a new template can be re-generated from the same biometrics. In this research, we focus on the design of the non-invertible transform for cancelable biometrics. This is due to the two observations that can be elaborated from literature. The two observations are (1) Most of the “non-invertible transforms” available in literature are in fact susceptible to partial or full inversion. (2) Despite the non-invertibility of the transform (e.g., many-to-one function), most reviewed schemes enjoy strong security while sacrificing the corresponding accuracy performance, thus demonstrating the inevitable security-performance tradeoff. In the proposed solution, fingerprint invariant features are firstly constructed from geometrical objects such as triangle, cuboids etc. Subsequently, the invariant features are applied into a well-designed non-invertible transform. Finally, the transformed features are discretized to generate fingerprint template such that the template cannot be revealed without successful biometric authentication. In other word, the proposed solution is designed based on the notion of cancelable biometrics and biometric encryption to transform fingerprint data into irreversibly transformed representation of the user template to preserve the privacy and security of user biometric data. In addition, the proposed solution also resolve biometric template reissue problem.