Skip to main content
SpringerLink
Log in

Privacy-Preserving Fuzzy Commitment for Biometrics via Layered Error-Correcting Codes

  • Conference paper
  • First Online:
Foundations and Practice of Security (FPS 2015)

Part of the book series: Lecture Notes in Computer Science ((LNSC,volume 9482))

Included in the following conference series:

Abstract

With the widespread development of biometrics, concerns about security and privacy are increasing. In biometrics, template protection technology aims to protect the confidentiality of biometric templates (i.e., enrolled biometric data) by certain conversion. The fuzzy commitment scheme gives a practical way to protect biometric templates using a conventional error-correcting code. The scheme has both concealing and binding of templates, but it has some privacy problems. Specifically, in case of successful matching, stored biometric templates can be revealed. To address such problems, we improve the scheme. Our improvement is to coat with two error-correcting codes. In particular, our scheme can conceal stored biometric templates even in successful matching. Our improved scheme requires just conventional error-correcting codes as in the original scheme, and hence it gives a practical solution for both template security and privacy of biometric templates.

A part of this research was done when the first author belonged to Fujitsu Laboratories Ltd.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 39.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    Homomorphic encryption is encryption with additional property that it can support operations on encrypted data (without decryption). In other words, this encryption enables certain meaningful operations while preserving the confidentiality of data.

  2. 2.

    The original fuzzy commitment is vulnerable against statistical attack (e.g., see [21] for iris-biometric case) since biometric feature vectors are non-uniform in general. Then we need to consider the security of our scheme in case that biometric feature vectors are non-uniform. But we do not discuss this here due to space restriction.

  3. 3.

    In the e-sketch protocol, templates can be revoked by changing keys for encryption and decryption. On the other hand, both the original fuzzy commitment scheme and ours require no keys for authentication. Therefore it is possible for an attacker to recover biometric data by generating biometric data similar to stored templates permanently.

References

  1. Belguechi, R., Alimi, V., Cherrier, E., Lacharme, P., Rosenberger, C.: An overview on privacy preserving biometrics. In: Yang, J. (ed.) Recent Application in Biometrics. InTech, Croatia (2011)

    Google Scholar 

  2. Blahut, R.E.: Algebraic Codes on Lines, Planes, and Curves: An Engineering Approach. Cambridge University Press, Cambridge (2008)

    Book  Google Scholar 

  3. Daugman, J.: High confidence visual recognition of persons by a test of statistical independence. IEEE Trans. Pattern Anal. Mach. Intell. 15(11), 1148–1161 (1993)

    Article  Google Scholar 

  4. Daugman, J.: The importance of being random: statistical principles of iris recognition. Pattern Recogn. 36(2), 279–291 (2003)

    Article  Google Scholar 

  5. Dodis, Y., Reyzin, L., Smith, A.: Fuzzy extractors: how to generate strong keys from biometrics and other noisy data. In: Cachin, C., Camenisch, J.L. (eds.) EUROCRYPT 2004. LNCS, vol. 3027, pp. 523–540. Springer, Heidelberg (2004). Full version in SIAM Journal on Computing, 38 (1), 97–139 (2008)

    Chapter  Google Scholar 

  6. Failla, P., Sutcu, Y., Barni, M.: Esketch: a privacy-preserving fuzzy commitment scheme for authentication using encrypted biometrics. In: Proceedings of the 12th ACM Workshop on Multimedia and Security, pp. 241–246. ACM (2010)

    Google Scholar 

  7. Fujitsu Laboratories Ltd.: Press release: Fujitsu develops world’s first authentication technology to extract and match 2,048-bit feature codes from palm vein images (2013), http://www.fujitsu.com/global/news/pr/archives/month/2013/20130805-01.html

  8. Hao, F., Anderson, R., Daugman, J.: Combining crypto with biometrics effectively. IEEE Trans. Comput. 55(9), 1081–1088 (2006)

    Article  Google Scholar 

  9. Hoang, T., Choi, D., Nguyen, T.: Gait authentication on mobile phone using biometric cryptosystem and fuzzy commitment scheme. Int. J. Inf. Secur. 14(6), 1–12 (2015)

    Article  Google Scholar 

  10. Ignatenko, T., Willems, F.M.: On privacy in secure biometric authentication systems. In: IEEE International Conference on Acoustics, Speech and Signal Processing–ICASSP, vol. 2, pp. 121–124 (2007)

    Google Scholar 

  11. Ignatenko, T., Willems, F.M.: Information leakage in fuzzy commitment schemes. IEEE Trans. Inf. Forensics Secur. 5(2), 337–348 (2010)

    Article  Google Scholar 

  12. Jain, A.K., Nandakumar, K., Nagar, A.: Biometric template security. EURASIP J. Adv. Signal Process. 2008, 113:1–113:17 (2008). http://dx.doi.org/10.1155/2008/579416

    Article  Google Scholar 

  13. Juels, A., Sudan, M.: A fuzzy vault scheme. Des. Codes Crypt. 38(2), 237–257 (2006)

    Article  MathSciNet  MATH  Google Scholar 

  14. Juels, A., Wattenberg, M.: A fuzzy commitment scheme. In: Proceedings of the 6th ACM Conference on Computer and Communications Security, pp. 28–36. ACM (1999)

    Google Scholar 

  15. Maltoni, D., Maio, D., Jain, A.K., Prabhakar, S.: Handbook of fingerprint recognition, 2nd edn. Springer, Heidelberg (2009)

    Book  Google Scholar 

  16. McEliece, R.J.: A public-key cryptosystem based on algebraic coding theory. DSN Prog. Rep. 42(44), 114–116 (1978)

    Google Scholar 

  17. Moon, T.K.: Error correction coding. Mathematical Methods and Algorithms. Wiley, Hoboken (2005)

    Google Scholar 

  18. Nandakumar, K., Nagar, A., Jain, A.K.: Hardening fingerprint fuzzy vault using password. In: Lee, S.-W., Li, S.Z. (eds.) ICB 2007. LNCS, vol. 4642, pp. 927–937. Springer, Heidelberg (2007)

    Chapter  Google Scholar 

  19. Paillier, P.: Public-key cryptosystems based on composite degree residuosity classes. In: Stern, J. (ed.) EUROCRYPT 1999. LNCS, vol. 1592, pp. 223–238. Springer, Heidelberg (1999)

    Chapter  Google Scholar 

  20. Pandey, J., Ojha, D., Sharma, A.: Enhance fuzzy commitment scheme: an approach for post quantum cryptosystem. J. Appl. Theor. Inf. Technol. 9, 16–19 (2005)

    Google Scholar 

  21. Rathgeb, C., Uhl, A.: Statistical attack against iris-biometric fuzzy commitment schemes. In: IEEE Computer Society Conference on Computer Vision and Pattern Recognition Workshops–CVPRW, pp. 23–30 (2011)

    Google Scholar 

  22. Rathgeb, C., Uhl, A., Wild, P.: Iris-biometric fuzzy commitment schemes under image compression. In: Ruiz-Shulcloper, J., Sanniti di Baja, G. (eds.) CIARP 2013, Part II. LNCS, vol. 8259, pp. 374–381. Springer, Heidelberg (2013)

    Chapter  Google Scholar 

  23. Sutcu, Y., Sencar, H.T., Memon, N.: A secure biometric authentication scheme based on robust hashing. In: Proceedings of the 7th Workshop on Multimedia and Security, pp. 111–116. ACM (2005)

    Google Scholar 

  24. Teoh, A.B., Goh, A., Ngo, D.C.: Random multispace quantization as an analytic mechanism for biohashing of biometric and random identity inputs. IEEE Trans. Pattern Anal. Mach. Intell. 28(12), 1892–1901 (2006)

    Article  Google Scholar 

  25. U.S. Department of Homeland Security: Privacy impact assessment for the biometric storage system (28 March 2007)

    Google Scholar 

  26. Zhou, X., Kevenaar, T.A., Kelkboom, E., Busch, C., Veen, M., Nouak, A.: Privacy enhancing technology for a 3D-face recognition system. BIOSIG 108(2), 3–14 (2007)

    Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Institute of Mathematics for Industry, Kyushu University, 744 Motooka Nishi-ku, Fukuoka, 819-0395, Japan

    Masaya Yasuda

  2. Fujitsu Laboratories Ltd., 1-1, Kamikodanaka 4-chome, Nakahara-ku, Kawasaki, 211-8588, Japan

    Takeshi Shimoyama, Narishige Abe, Shigefumi Yamada & Takashi Shinzaki

  3. Division of Mathematics, Electronics and Informatics, Graduate School of Science and Engineering, Saitama University, 255 Shimo-Okubo, Sakura, Saitama, 338-8570, Japan

    Takeshi Koshiba

Authors
  1. Masaya Yasuda
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Takeshi Shimoyama
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Narishige Abe
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Shigefumi Yamada
    View author publications

    You can also search for this author in PubMed Google Scholar

  5. Takashi Shinzaki
    View author publications

    You can also search for this author in PubMed Google Scholar

  6. Takeshi Koshiba
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Masaya Yasuda .

Editor information

Editors and Affiliations

  1. Télécom SudParis, Evry, France

    Joaquin Garcia-Alfaro

  2. School of Computer Science, Carleton University, Ottawa, Ontario, Canada

    Evangelos Kranakis

  3. École des Mines de Nancy, Université de Lorraine, Nancy Cedex, France

    Guillaume Bonfante

Rights and permissions

Reprints and permissions

Copyright information

© 2016 Springer International Publishing Switzerland

About this paper

Cite this paper

Yasuda, M., Shimoyama, T., Abe, N., Yamada, S., Shinzaki, T., Koshiba, T. (2016). Privacy-Preserving Fuzzy Commitment for Biometrics via Layered Error-Correcting Codes. In: Garcia-Alfaro, J., Kranakis, E., Bonfante, G. (eds) Foundations and Practice of Security. FPS 2015. Lecture Notes in Computer Science(), vol 9482. Springer, Cham. https://doi.org/10.1007/978-3-319-30303-1_8

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-30303-1_8

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-30302-4

  • Online ISBN: 978-3-319-30303-1

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation