Biometric Template Privacy Using Visual Cryptography

This chapter aims to enhance the security of textual passwords by adding a new layer that involves an individual's typing rhythm without requiring additional devices. It discusses authentication methods and develops a textual password authentication system, which takes advantage of the fact that every user has a distinct way of typing. Twenty participants, including novice and expert users, assessed the proposed system. The measuring metrics used were the False Acceptance Rate (FAR) and False Rejection Rate (FRR). The flight time and typing rhythm were the biometric identification template. The results indicated low false rejection and acceptance rates, with the initial session registering 0.0 FRR and 0.1 FAR. Two weeks later, the second session recorded 0.25 FRR and 0.0 FAR. Using this model, users do not need to select a complex password they might forget. Instead, they can utilize a good rhythm different from their natural typing rhythm, making it challenging to guess.

Finger Knuckle Print as Unimodal Fuzzy Vault Implementation

We examined the false acceptance rate (FAR) and false rejection rate (FRR) of varying precision verification experimental designs. Analysis of variance was applied to derive the subcomponents of imprecision (ie, repeatability, between-run, between-day imprecision) for complex matrix experimental designs (day × run × replicate; day × run). For simple nonmatrix designs (1 day × multiple replicates or multiday × 1 replicate), ordinary standard deviations were calculated. The FAR and FRR in these different scenarios were estimated. The FRR increased as more samples were included in the precision experiment. The application of an upper verification limit, which seeks to cap FRR at 5% for multiple experiments, significantly increased the FAR. The FRR decreases as the observed imprecision increases relative to the claimed imprecision and when a greater number of days, runs, or replicates are included in the verification design. Increasing the number or days, runs, or replicates also reduces the FAR for between-day imprecision and repeatability. Design of verification experiments should incorporate the local availability of resources and analytical expertise. The largest imprecision component should be targeted with a greater number of measurements. Consideration of both FAR and FRR should be given when committing a platform into service.

"This paper explores the application of neural networks in multimodal biometric authentication systems, emphasizing the integration of multiple biometric modalities to enhance security, accuracy, and robustness against various attacks. Traditional authentication methods, such as passwords and single-modal biometrics, often suffer from vulnerabilities, including spoofing, environmental factors, and data breaches. To address these challenges, multimodal authentication systems combine several biometric traits, such as facial recognition, fingerprint scanning, voice recognition, and keystroke dynamics, to achieve higher reliability and resistance to security threats. The study provides an overview of public datasets used for training neural network-based biometric authentication models, including VoxCeleb, RAVDESS, MOBIO, and SDUMLA-HMT. These datasets contain diverse biometric information necessary for developing robust multimodal authentication systems. The paper evaluates the effectiveness of existing approaches using key performance metrics such as accuracy, false acceptance rate (FAR), false rejection rate (FRR), and area under the curve (AUC). Additionally, specialized metrics are considered, including failure to enroll rate (FTE), failure to acquire rate (FTA), and template stability (TS), which are crucial for real-world applications. The role of neural networks in multimodal biometric authentication is analyzed by examining state-of-the-art architectures, including convolutional neural networks (CNNs) and deep learning-based feature fusion methods. Various fusion levels—feature-level, score-level, and decision-level—are discussed to determine the optimal integration strategy for improving authentication performance. The results indicate that multimodal systems significantly outperform unimodal authentication methods by reducing vulnerability to spoofing and environmental variations. Experimental findings suggest that integrating multiple biometric traits enhances the system’s adaptability to dynamic conditions, reducing both false acceptance and false rejection rates. Despite these advantages, several challenges remain, including computational complexity, data privacy concerns, and the need for real-time processing capabilities. Future research should focus on optimizing multimodal fusion techniques, improving generalization across different datasets, and enhancing the security of biometric templates against adversarial attacks. Additionally, developing lightweight neural network architectures suitable for mobile and embedded systems is essential for the practical deployment of multimodal authentication technologies"

The problem of speaker recognition from a given set of speakers for any language and any context is considered. A database of Russian numerals that contains speech segments from 216 men and 177 women, each of whom spoke from 400 to 800 words, is used for recognition. Speech has been recorded on different types of microphones in different rooms at the natural noise level. Recognition is based on solutions of the inverse problem of finding the voice excitation pulse shape for each pitch period by the known speech segment. The pulse shape is defined as the inverse Fourier transform of the regularized ratio of speech signal spectra at the intervals of the open and closed glottis. Recognition is carried out by ten parameters: the pitch period, the open glottis interval duration, times when the source amplitude is maximum, minimum, or zero, the amplitude ratio for the minimum and maximum source pulses, three decomposition ratios of the source function by the principal component method, and the vowel duration. In such a recognition procedure, in the case of the utterance of a word that contains one vowel, the false reject rate (FRR) for men is 1.7---5.4%, and the false acceptance rate (FAR) is 5.4---7.1%. For women FRR = 2---5.2% and FAR = 5.2---6.3%. The recognition error decreases with an increasing number of vowels in the speech signal. At 10 vowels, for men FRR = 0.05---0.2% and FAR = 0.07---0.8%, and for women FRR = 0.09---0.2% and FAR = 0.17---2.1%.

In recent years the security breaches and fraud transactions are increasing day by day. So there is a necessity for highly secure authentication technologies. The security of an authentication system can be strengthened by using Biometric system rather than the traditional method of authentication like Identity Cards (ID) and password which can be stolen easily. A biometric system works on biometric traits and fingerprint has the maximum share in market for providing biometric authentication as it is reliable, consistent and easy to capture. Although the biometric system is used to provide security to many applications but it is susceptible to different types of assaults too. Among all the modules of the biometric system which needs security, biometric template protection has received great consideration in the past years from the research community due to sensitivity of the biometric data stored in the form of template. A number of methods have been devised for providing template protection. Fuzzy vault is one of the cryptosystem based method of template security. The aim of fuzzy vault technique is to protect the precarious data with the biometric template in a way that only certified user can access the secret by providing valid biometric. In this paper, a modified version of fuzzy vault is presented to increase the level of security to the template and the secret key. The polynomial whose coefficients represent the key is transformed using an integral operator to hide the key where the key can no longer be derived if the polynomial is known to the attacker. The proposed fuzzy vault scheme also prevents the system from stolen key inversion attack. The results are achieved in terms of False Accept Rate (FAR), False Reject Rate (FRR), Genuine Acceptance Rate (GAR) by varying the degree of polynomial and number of biometric samples. It was calculated that for 40 users GAR was found to be 92%, 90%, 85% for degree of polynomial to be 3, 4 and 5 respectively. It was observed that increasing the degree of polynomial decreased the FAR rate, thus increasing the security

Due to the enormous usage of the internet for transmission of data over a network, security and authenticity become major risks. Major challenges encountered in biometric system are the misuse of enrolled biometric templates stored in database server. To describe these issues various algorithms are implemented to deliver better protection to biometric traits such as physical (Face, fingerprint, Ear etc.) and behavioural (Gesture, Voice, tying etc.) by means of matching and verification process. In this work, biometric security system with fuzzy extractor and convolutional neural networks using face attribute is proposed which provides different choices for supporting cryptographic processes to the confidential data. The proposed system not only offers security but also enhances the system execution by discrepancy conservation of binary templates. Here Face Attribute Convolutional Neural Network (FACNN) is used to generate binary codes from nodal points which act as a key to encrypt and decrypt the entire data for further processing. Implementing Artificial Intelligence (AI) into the proposed system, automatically upgrades and replaces the previously stored biometric template after certain time period to reduce the risk of ageing difference while processing. Binary codes generated from face templates are used not only for cryptographic approach is also used for biometric process of enrolment and verification. Three main face data sets are taken into the evaluation to attain system performance by improving the efficiency of matching performance to verify authenticity. This system enhances the system performance by 8% matching and verification and minimizes the False Acceptance Rate (FAR), False Rejection Rate (FRR) and Equal Error Rate (EER) by 6 times and increases the data privacy through the biometric cryptosystem by 98.2% while compared to other work.

The cumulative match curve (CMC) is used as a measure of 1: m identification system performance. It judges the ranking capabilities of an identification system. The receiver operating characteristic curve (ROC curve) of a verification system, on the other hand, expresses the quality of a 1:1 matcher. The ROC plots the false accept rate (FAR) of a 1:1 matcher versus the false reject rate (FRR) of the matcher. We show that the CMC is also related to the FAR and FRR of a 1:1 matcher, i.e., the matcher that is used to rank the candidates by sorting the scores. This has as a consequence that when a 1:1 matcher is used for identification, that is, for sorting match scores from high to low, the CMC does not offer any additional information beyond the FAR and FRR curves. The CMC is just another way of displaying the data and can be computed from the FAR and FRR.

The main purpose of this study is to present a novel personal authentication approach with the electrocardiogram (ECG) signal. The electrocardiogram is a recording of the electrical activity of the heart and the recorded signals can be used for individual verification because ECG signals of one person are never the same as those of others. The discrete wavelet transform was applied for extracting features that are the wavelet coefficients derived from digitized signals sampled from one-lead ECG signal. By the proposed approach applied on 35 normal subjects and 10 arrhythmia patients, the verification rate was 100% for normal subjects and 81% for arrhythmia patients. Furthermore, the performance of the ECG verification system was evaluated by the false acceptance rate (FAR) and false rejection rate (FRR). The FAR was 0.83% and FRR was 0.86% for a database containing only 35 normal subjects. When 10 arrhythmia patients were added into the database, FAR was 12.50% and FRR was 5.11%. The experimental results demonstrated that the proposed approach worked well for normal subjects. For this reason, it can be concluded that ECG used as a biometric measure for personal identity verification is feasible.

Problem statement: In any real time biometric system processing speed and recognition time are crucial parameters. Reducing processing time involves many parameters like normalization, FAR, FRR, management of eyelid and eyelash occlusions, size of signature etc. Normalization consumes substantial amount of time of the system. This study contributes for improved iris recognition system with reduced processing time, False Acceptance Rate (FAR) and False Rejection Rate (FRR). Approach: To improve system performance and reliability of a biometric system. It avoided the iris normalization process used traditionally in iris recognition systems. The technique proposed here used different masks to filter out iris image from an eye. Comparative study of different masks was done and optimized mask is proposed. The experiment was carried on CASIA database consisting of 756 iris images of 108 persons. Each person contributes seven images of eye (108×7 = 756) images in the database. Results: In the proposed method: (1) Normalization step is avoided; (2) Computational time is reduced by 0.3342 sec; (3) Iris signature size is reduced; (4) Improved performance parameters. (With reduced feature size, proposed method achieves 99.4866% accuracy, 0.0069% FAR, 1.0198% FRR and significant increase in speed of the system). Conclusion: Iris signature proposed was comparatively small just of 1×24 size. Though Daugman’s method gives best accuracy of 99.90% but the iris signature length used by that algorithm is comparatively very high that is 1×2048 phase vector. Also Daugman has used phase information in signature formation. Our method gives a accuracy of 99.474% with a signature of comparatively very small length. This has definitely contributed to improve the speed.

We propose a novel modality for active biometric authentication: electrical muscle stimulation (EMS). To explore this, we engineered an interactive system, which we call ElectricAuth, that stimulates the user’s forearm muscles with a sequence of electrical impulses (i.e., EMS challenge) and measures the user’s involuntary finger movements (i.e., response to the challenge). ElectricAuth leverages EMS’s intersubject variability, where the same electrical stimulation results in different movements in different users because everybody’s physiology is unique (e.g., differences in bone and muscular structure, skin resistance and composition, etc.). As such, ElectricAuth allows users to login without memorizing passwords or PINs. ElectricAuth’s challenge-response structure makes it secure against data breaches and replay attacks, a major vulnerability facing today’s biometrics such as facial recognition and fingerprints. Furthermore, ElectricAuth never reuses the same challenge twice in authentications – in just one second of stimulation it encodes one of 68M possible challenges. In our user studies, we found that ElectricAuth resists: (1) impersonation attacks (false acceptance rate: 0.17% at 5% false rejection rate); (2) replay attacks (false acceptance rate: 0.00% at 5% false rejection rate); and, (3) synthesis attacks (false acceptance rates: 0.2-2.5%). Our longitudinal study also shows that ElectricAuth produces consistent results over time and across different humidity and muscle conditions.

Touch gesture biometrics authentication system is the study of user's touching behavior on his touch device to identify him. The features traditionally used in touch gesture authentication systems are extracted using hand-crafted feature extraction approach. In this work, we investigate the ability of Deep Learning (DL) to automatically discover useful features of touch gesture and use them to authenticate the user. Four different models are investigated Long-Short Term Memory (LSTM), Gated Recurrent Unit (GRU), Convolutional Neural Network (CNN) combined with LSTM (CNN-LSTM), and CNN combined with GRU(CNN-GRU). In addition, different regularization techniques are investigated such as Activity Regularizer, Batch Normalization (BN), Dropout, and LeakyReLU. These deep networks were trained from scratch and tested using TouchAlytics and BioIdent datasets for dynamic touch authentication. The result reported in terms of authentication accuracy, False Acceptance Rate (FAR), False Rejection Rate (FRR). The best result we have been obtained was 96.73%, 96.07% and 96.08% for training, validation and testing accuracy respectively with dynamic touch authentication system on TouchAlytics dataset with CNN-GRU DL model, while the best result of FAR and FRR obtained on TouchAlytics dataset was with CNN-LSTM were FAR was 0.0009 and FRR was 0.0530. For BioIdent dataset the best results have been obtained was 84.87%, 78.28% and 78.35% for Training, validation and testing accuracy respectively with CNN-LSTM model. The use of a learning based approach in touch authentication system has shown good results comparing with other state-of-the-art using TouchAlytics dataset.

This paper proposes an authentication protocol based on post-quantum cryptography and iris recognition. The process uses a modified version of the original McEliece cryptographic algorithm that provides post-quantum security. Additionally, iris recognition is included in the decryption process, ensuring that only authentic users have access to confidential information, or can operate critical infrastructures or systems that must be protected against malicious users or impostors. A distributed framework, in which several autonomous entities interact with each other, participates in the whole process to reduce the odds of a successful attack. Biometric templates are encrypted and safely stored in a database. These templates meet all requirements described in the ISO/IEC 24745 standard regarding data protection. Due to the homomorphic property of McEliece, the decryption process operates using the encrypted version of these biometric templates, ensuring that critical information is not revealed. The use of McEliece does not affect the overall accuracy of the recognition process, so that the same False Acceptance and False Rejection rates are obtained when compared with the non-protected scheme.

Smart control access to any service is at the very basis of any smart city project. Biometrics have been used as a solution for system access control, for many years now. However, the simple use of biometrics can not be considered as final and perfect solution. Most problems are related to the data transmission way between the medias, where the users require access and the servers where the biometric data, captured upon registration, are stored. In this paper, the use smart-cards is adopted as a possible effective yet efficient solution to this problem. Palm-prints have been used as a human identifier for a long time now. This biometric is considered one of the most reliable to distinguish a person from another as its unique yet stable over time. In this work, we propose an efficient implementation of palm-print verification on smart-cards. For this implementation, the matching is done on-card. Thus, the biometric characteristics are always kept in the owner’s card, guaranteeing the maximum security and privacy. In a first approach, the False Acceptance Rate (FAR) and False Rejection Rate (FRR) are improved using upward, downward, leftward and rightward translations of the matched palm-codes. However, after thorough analysis of the achieved results, we show that the proposed method introduces a significant increase in terms of execution time of the matching operation. In order to mitigate this impact, we augmented the proposed technique with an acceptance threshold verification, thus decreasing drastically the execution time of the matching operation, and yet achieving considerably low FAR and FRR. It is noteworthy to point out that these characteristics are at the basis of any access control successful usage.

Online signature verification employs a distinctive biometric trait by utilizing both static and dynamic features extracted from 2D signature images. A hybrid wavelet transform, denoted as HWT-1 with a size of 256, is formed through the Kronecker product of two orthogonal transforms, such as DCT, DHT, Haar, Hadamard, and Kekre, each with sizes 4 and 64. This HWT facilitates signal analysis at both global and local levels, akin to traditional wavelet transforms. Specifically, HWT-1 processes the 256 samples of online handwritten signatures, yielding 128 samples that constitute the feature vectors for signature verification and forgery detection. These feature vectors are then inputted into the Left-Right and Ergodic Hidden Markov Model (HMM) classifiers for further analysis. The HMMs are trained using 10 randomly selected genuine signature samples and subsequently tested with the remaining 10 genuine signatures and 20 forged signatures from the SVC 2004 signature database, repeating this process 20 times to compute average values. Among all possible combinations of HWT-1 utilizing DCT, DHT, Haar, Hadamard, and Kekre transforms for the Left-Right HMM model, the combination of DCT 4 and Haar 64 demonstrates the best performance with a False Rejection Rate (FRR) and False Acceptance Rate (FAR) of 1.05% and 0.99%, respectively, at state 3. Similarly, considering all feasible combinations of HWT-1 for the Ergodic HMM model, the combination of DCT 4 and Kekre 64 yields the optimal performance with an FRR and FAR of 1.24% and 1.33%, respectively, at state 3.