首页> 外文会议>IEEE Conference on Communications and Network Security >Efficient and secure template blinding for biometric authentication
【24h】

Efficient and secure template blinding for biometric authentication

机译:高效且安全的模板盲目技术,可进行生物识别

获取原文

摘要

Fingerprints as biometric authenticators are rapidly increasing in popularity, with fingerprint scanners available on many modern smartphones and laptops. Because these authenticators are non-revocable, special care must be taken to prevent leakage of the representative feature information of a user's fingerprint. While secure multiparty computation protocols have been designed to maintain fingerprint privacy during authentication, they do not protect the data stored on the authentication server. In this work, we develop a technique for blinding the stored biometric template such that the authentication server never observes biometric information in the clear, and cannot accidentally leak this information in the event of a breach. We show how our blinding technique can be combined with the privacy-preserving GSHADE protocol to privately compare biometric feature vectors using a variety of distance metrics with negligible overhead in computation time. We then construct a complete privacy-preserving remote fingerprint authentication system based on the Euclidean Distance metric, and show that a user can authenticate using privacy-preserving techniques in as little as 1.5 seconds. This work provides a template for designing low-cost blinding techniques for biometric authentication systems, and shows a practical use-case for secure multiparty computation protocols in remote authentication systems.
机译:作为指纹识别器的指纹正迅速普及,许多现代智能手机和笔记本电脑上都配备了指纹扫描仪。由于这些验证码是不可撤销的,因此必须格外小心,以防止泄露用户指纹的代表性特征信息。尽管已设计安全的多方计算协议来在身份验证期间维护指纹隐私,但它们不能保护存储在身份验证服务器上的数据。在这项工作中,我们开发了一种使存储的生物特征模板不可见的技术,以使身份验证服务器从不清晰地观察生物特征信息,并且在发生违规事件时也不会意外泄漏该信息。我们展示了如何将我们的盲法技术与保护隐私的GSHADE协议相结合,以使用各种距离度量在计算时间上可忽略的开销来私下比较生物特征向量。然后,我们基于欧几里德距离度量标准构建了一个完整的隐私保护远程指纹认证系统,并表明用户可以在短短1.5秒内使用隐私保护技术进行身份认证。这项工作为设计用于生物认证系统的低成本盲目技术提供了模板,并显示了远程认证系统中安全多方计算协议的实际用例。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号