NDLI: A Theoretical Analysis of Authentication, Privacy, and Reusability Across Secure Biometric Systems

Content Provider	IEEE Xplore Digital Library
Author	Ye Wang Rane, S. Draper, S.C. Ishwar, P.
Copyright Year	2005
Abstract	We present a theoretical framework for the analysis of privacy and security trade-offs in secure biometric authentication systems. We use this framework to conduct a comparative information-theoretic analysis of two biometric systems that are based on linear error correction codes, namely fuzzy commitment and secure sketches. We derive upper bounds for the probability of false rejection (P_FR) and false acceptance (P_FA) for these systems. We use mutual information to quantify the information leaked about a user's biometric identity, in the scenario where one or multiple biometric enrollments of the user are fully or partially compromised. We also quantify the probability of successful attack (P_SA) based on the compromised information. Our analysis reveals that fuzzy commitment and secure sketch systems have identical P_FR, P_FA, P_SA, and information leakage, but secure sketch systems have lower storage requirements. We analyze both single-factor (keyless) and two-factor (key-based) variants of secure biometrics, and consider the most general scenarios in which a single user may provide noisy biometric enrollments at several access control devices, some of which may be subsequently compromised by an attacker. Our analysis highlights the revocability and reusability properties of key-based systems and exposes a subtle design trade-off between reducing information leakage from compromised systems and preventing successful attacks on systems whose data have not been compromised.
Sponsorship	IEEE Signal Processing Society
Starting Page	1825
Ending Page	1840
Page Count	16
File Size	2637053
File Format	PDF
ISSN	15566013
Volume Number	7
Issue Number	6
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2012-12-01
Publisher Place	U.S.A.
Access Restriction	One Nation One Subscription (ONOS)
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Biometrics Access control Authentication Noise measurement Error correction codes Probes security fuzzy commitment information leakage privacy reusability revocability secure sketch
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Safety, Risk, Reliability and Quality

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Information Leakage in Fuzzy Commitment Schemes

Analysis of Reusability of Secure Sketches and Fuzzy Extractors

Preventing the Decodability Attack Based Cross-Matching in a Fuzzy Commitment Scheme

Protecting Biometric Templates With Sketch: Theory and Practice

Blind Authentication: A Secure Crypto-Biometric Verification Protocol

Multibiometric Cryptosystems Based on Feature-Level Fusion

Template-Free Biometric-Key Generation by Means of Fuzzy Genetic Clustering

Privacy–Security Trade-Offs in Biometric Security Systems—Part I: Single Use Case

An Efficient Generic Framework for Three-Factor Authentication With Provably Secure Instantiation

A Theoretical Analysis of Authentication, Privacy, and Reusability Across Secure Biometric Systems

Similar Documents

Information Leakage in Fuzzy Commitment Schemes

Analysis of Reusability of Secure Sketches and Fuzzy Extractors

Preventing the Decodability Attack Based Cross-Matching in a Fuzzy Commitment Scheme

Protecting Biometric Templates With Sketch: Theory and Practice

Blind Authentication: A Secure Crypto-Biometric Verification Protocol

Multibiometric Cryptosystems Based on Feature-Level Fusion

Template-Free Biometric-Key Generation by Means of Fuzzy Genetic Clustering

Privacy–Security Trade-Offs in Biometric Security Systems—Part I: Single Use Case

An Efficient Generic Framework for Three-Factor Authentication With Provably Secure Instantiation

A Theoretical Analysis of Authentication, Privacy, and Reusability Across Secure Biometric Systems