Abstract:Biometric authentication is getting increasingly popular due to the convenience of using unique individual traits, such as fingerprints, palm veins, irises. Especially fingerprints are widely used nowadays due to the availability and low cost of fingerprint scanners. To avoid identity theft or impersonation, fingerprint data is typically stored locally, e.g., in a trusted hardware module, in a single device that is used for user enrollment and authentication. Local storage, however, limits the ability to implement distributed applications, in which users can enroll their fingerprint once and use it to access multiple physical locations and mobile applications afterwards. In this paper, we present a distributed authentication system that stores fingerprint data in a server or cloud infrastructure in a privacy-preserving way. Multiple devices can be connected and perform user enrollment or verification. To secure the privacy and integrity of sensitive data, we employ a cryptographic construct called fuzzy vault. We highlight challenges in implementing fuzzy vault-based authentication, for which we propose and compare alternative solutions. We conduct a security analysis of our biometric cryptosystem, and as a proof of concept, we build an authentication system for access control using resource-constrained devices (Raspberry Pis) connected to fingerprint scanners and the Microsoft Azure cloud environment. Furthermore, we evaluate the fingerprint matching algorithm against the well-known FVC2006 database and show that it can achieve comparable accuracy to widely-used matching techniques that are not designed for privacy, while remaining efficient with an authentication time of few seconds.

An efficient Minkowski distance-based matching with Merkle hash tree authentication for biometric recognition in cloud computing

Biometrics-based identifiers for digital identity management

A comparative analysis of similarity distance measure functions for biocryptic authentication in cloud databases

MASK: Efficient and privacy-preserving m-tree based biometric identification over cloud

Multimodal Biometric Identification System Based on Finger Geometry, Knuckle Print and Palm Print

A proposed biometric authentication hybrid approach using iris recognition for improving cloud security

Biometric Authentication using Nonparametric Methods

Achieving Efficient and Privacy-preserving Biometric Identification in Cloud Computing

An Accurate Multi-Modal Biometric Identification System for Person Identification Via Fusion of Face and Finger Print.

Cryptographic Algorithm based Feature Level Fusion of Fingerprint and Iris in a Multi-Biometric Recognition System

An Efficient and Privacy-Preserving Biometric Identification Scheme Based on the FITing-Tree

Enhanced Biometric Template Protection Schemes for Securing Face Recognition in IoT Environment

Privacy Protection in Distributed Fingerprint-based Authentication

Secure and privacy improved cloud user authentication in biometric multimodal multi fusion using blockchain-based lightweight deep instance-based DetectNet

Blind-Match: Efficient Homomorphic Encryption-Based 1:N Matching for Privacy-Preserving Biometric Identification

A Fingerprint Recognition Scheme Based on Assembling Invariant Moments for Cloud Computing Communications

Secure biometric authentication with de-duplication on distributed cloud storage

A key binding system based on n-nearest minutiae structure of fingerprint

An Efficient Fingerprint Identification Algorithm Based on Minutiae and Invariant Moment.

Multibiometric authentication with MATLAB simulation

Blind-Touch: Homomorphic Encryption-Based Distributed Neural Network Inference for Privacy-Preserving Fingerprint Authentication