Chaff point generation mechanism for improving fuzzy vault security

In recent years the security breaches and fraud transactions are increasing day by day. So there is a necessity for highly secure authentication technologies. The security of an authentication system can be strengthened by using Biometric system rather than the traditional method of authentication like Identity Cards (ID) and password which can be stolen easily. A biometric system works on biometric traits and fingerprint has the maximum share in market for providing biometric authentication as it is reliable, consistent and easy to capture. Although the biometric system is used to provide security to many applications but it is susceptible to different types of assaults too. Among all the modules of the biometric system which needs security, biometric template protection has received great consideration in the past years from the research community due to sensitivity of the biometric data stored in the form of template. A number of methods have been devised for providing template protection. Fuzzy vault is one of the cryptosystem based method of template security. The aim of fuzzy vault technique is to protect the precarious data with the biometric template in a way that only certified user can access the secret by providing valid biometric. In this paper, a modified version of fuzzy vault is presented to increase the level of security to the template and the secret key. The polynomial whose coefficients represent the key is transformed using an integral operator to hide the key where the key can no longer be derived if the polynomial is known to the attacker. The proposed fuzzy vault scheme also prevents the system from stolen key inversion attack. The results are achieved in terms of False Accept Rate (FAR), False Reject Rate (FRR), Genuine Acceptance Rate (GAR) by varying the degree of polynomial and number of biometric samples. It was calculated that for 40 users GAR was found to be 92%, 90%, 85% for degree of polynomial to be 3, 4 and 5 respectively. It was observed that increasing the degree of polynomial decreased the FAR rate, thus increasing the security

Biometric systems accumulate information from biometric elements of an individual and used to exceptionally confirm the person with the physical and behavioral properties of the biometric characteristic. Biometrics and cryptography systems have been identified as the two main components of digital security system. Cryptography is combined with biometric to achieve high security. In this paper, fingerprint template protection is proposed which is based on fuzzy vault scheme. Initially, enrolled fingerprint images are preprocessed using some image processing techniques and preprocessed images are prealigned automatically using directed reference point. All the minutiae points are extracted and extracted minutiae features along with secret key are used to produce the fuzzy vault. Query features are given as an input with the stored template to recover the corresponding key. The proposed method is validated on FVC 2002 database. Simulation results prove that the proposed method can achieve high genuine acceptance rate with improved security.

The need for fool proof authentication procedures away from traditional authentication mechanisms like passwords, security PINS has led to the advent of biometric authentication in information systems. Biometric data extracted from physiological features of a person including but not limited to fingerprints, palm prints, face or retina for purpose of verification & identification is saved as biometric templates. The inception of biometrics in access control systems has not been without its own hitches & like other systems it has its fair share of challenges. Biometric fingerprints being the most mature of all biometric spheres are the most widely adopted biometric authentication systems. Biometric systems effectiveness lies on how secure they are at preventing inadvertent disclosure of biometric templates in an information system’s archive. This however has not been the case as biometric templates have been fraudulently accessed to gain unauthorized access in identification and verification systems. In order to achieve strong and secure biometric systems, biometric systems developers need to build biometric systems that properly secure biometric templates. Several biometric template protection schemes and approaches have been proposed and used to safeguard stored biometric templates. Despite there being various biometric template protection schemes and approaches in existence, none of them has provided the most authentic, reliable, efficient and deterrent means to totally secure biometric fingerprint templates. This research sought to establish status of the current biometric template protection techniques and methods by conducting a survey and analyzing data gathered from a sample of seventy-eight (78) respondents. We will report these results and give our conclusion based on findings of the survey in this paper.

The fuzzy vault is an innovative way to share secret keys, combining traditional cryptography with biometrics and biometric template protection. This method forms the basis for the reliable operation of unmanned aerial vehicles (UAVs) through anonymizing drone operators and safely using their data and onboard information. However, due to the inherent instability of biometrics, traditional fuzzy vault schemes face challenges, such as reduced recognition rates with increased chaff points, impractical runtimes due to high-order polynomial reconstruction, and susceptibility to correlation attacks. This paper proposes an efficient fuzzy vault scheme to address these challenges. We generate two secret keys based on biometrics: the first key is produced from the operator’s unique features like the face and iris, using a confidence interval; the second key, used to construct a polynomial, is based on what the operator remembers. These dual-key fuzzy vaults enable the stable generation of genuine points during encoding, easy extraction during decoding, and effective operator authentication while maintaining anonymity. Our experimental results demonstrate improved security and secret acquisition accuracy using the AR face database. These results are achieved regardless of increased false vaults, enabling real-time polynomial reconstruction and resilience against correlation attacks. Importantly, our enhanced fuzzy vault scheme allows the application of this secure, real-time authentication process, safeguarding the anonymity of drone operators.

Multimodal biometric user authentication using improved decentralized fuzzy vault scheme based on Blockchain network

The fuzzy vault algorithm is mainly used for data privacy protection in fault-tolerant environments, It binds biometric features and secret data together safely to form a vault, which can realize "fuzzy" unlocking. in the real-life, fuzzy vault is mainly used in biometric authentication, image capture, recognition, etc. However, At present, most fuzzy vault schemes have the problems of high computational complexity and low communication efficiency. To solve the problems of high computational complexity and low communication efficiency in identity authentication, we based on the fuzzy vault scheme and construct a multi-secret sharing fuzzy vault scheme. which splits the big secret value into multiple sub-secret values and uses the RS code multi-secret sharing decoding method to improve the efficiency of biological identity authentication. Firstly, splits the big secret value into multiple sub-secret values. Then, We construct a multi-secret sharing scheme. our scheme supports the sharing of multi-secret information. Finally, we analyze the computational complexity and communication complexity of the scheme. The analysis shows that our scheme can reduce the computational complexity and communication complexity by an order of magnitude.

We construct an automatic secure fingerprint verification system based on the fuzzy vault scheme to address a major security hole currently existing in most biometric authentication systems. The construction of the fuzzy vault during the enrollment phase is automated by aligning the most reliable reference points between different templates, based on which the converted features are used to form the lock set. The size of the fuzzy vault, the degree of the underlying polynomial, as well as the number of templates needed for reaching the reliable reference point are investigated. This results in a high unlocking complexity for attackers with an acceptable unlocking accuracy for legal users.

The fuzzy vault scheme has recently become popular approaches to biometric template protection. Since the original scheme has been designed to work with unordered biometric features, such a scheme cannot effectively utilize order information. We present in this paper a new fuzzy vault scheme that can effectively utilize the ordered characteristics of biometric features. In this scheme, we develop ordered fuzzy vault encoding and decoding processes in order to utilize the ordered information of the features. This prevents the feature components from cross matching and reduces false acceptance ratio (FAR). Furthermore, the original biometric features (or original template) are transformed into binary features (or secure template) by random transformation. The transformed secure template provides both diversity and revocability. This transform also prevents an adversary from obtaining the original biometric template from the secure template and therefore enhance the secure level of the scheme. Based on the proposed scheme, we design an online authentication application framework implemented using face images. We compare our scheme with two contemporary approaches to verify the effectiveness of this approach. Experimental results show that our scheme is able to achieve an improved performance with several desired properties of an online authentication system.

A crucial issue in the design of a cryptographic system is the problem of key management. A state-of-the-art solution to this problem is to use bio-cryptosystems, in which cryptography is combined with biometrics. In this solution, the user biometrics is used to protect the cryptographic key. A popular approach to the design of such bio-cryptosystems is the application of a fuzzy vault scheme. This so-called vault is a secure storage in which the key is hidden within the biometric data mixed up with meaningless chaff points. The most critical operation in the fuzzy vault scheme is generation of these chaff points. Experiments will show that this module is the most compute-intensive part of the whole system. This paper introduces a new chaff generation algorithm for the fuzzy vault in a bio-cryptosystem. The proposed algorithm, which is based on a circle packing mathematical theorem, is computationally less intensive than existing methods. Experimental results show that the proposed algorithm is around 100 times faster than existing methods for 200, and above, number of chaff points, and therefore, is suitable for a real-time embedded system implementation.

Biometric recognition systems provide security to systems by preventing unauthorized access. In recent times, research proved that unprotected biometric systems can be invaded by hackers. A spoofed biometric security can be a great risk as a compromised biometric template can be lost forever. It can also be used to gain unauthorized access into systems. There is the need to protect biometric template from hackers and possible misuse. This study presents various template protection schemes in literature. In addition, this paper reviewed fuzzy vault biocryptosystem template protection scheme by comparing some fuzzy vault schemes in literature based on their False acceptance rates (FAR) and Genuine acceptance rates (GAR) with different degrees of polynomial. The study also reported past studies with the lowest and the highest FAR as 0.00% and 0.87% respectively while the lowest and the highest GAR stand at 72% and 99% respectively.

Based on the classical fuzzy vault and the Diffie-Hellman key exchange scheme, a key sharing fuzzy vault scheme is proposed. In this fuzzy vault scheme, the two users cooperatively build their shared fuzzy vault with a shared key hidden in it using their own biometric features, and they can respectively use their biometric features to unlock the fuzzy vault to get their shared key without running the risk of disclosure of their biometric features later. The security of our scheme is based on the security of the classical fuzzy vault scheme and and the discrete logarithm problem in a given finite group.

Nowadays, the crypto-biometric schemes are commonly studied to deal with the key management problem existing in cryptographic systems. In the paper we consider a well-known fuzzy vault scheme working on non-standard biometric data associated with palm-oriented gestures. We discuss the usefulness of the touch-less palm tracking system focused on handling the biomechanical characteristics of one's hand to protect the cryptographic key or other secret data. As a behavioral template the fixed finger-based gesture is applied. In order to generate unordered sets for fuzzy vault we use the global approach where features are decoded from fingertip position and velocity. Both the raw and DCT-calculated time series are preprocessed to solve the instability and variability problem strictly related to behavioral character of the data. We provide the experimental results and discuss the security issues.

Finger Knuckle Print as Unimodal Fuzzy Vault Implementation

Template-Protection-Techniken stellen eine wichtige Ergänzung zu biometrischen Systemen, um das gewünschte Sicherheitsniveau zu erreichen und die Anforderungen an den Schutz der Privatsphäre zu erfüllen. Diese Techniken ermöglichen Erneuerung und Widerruf der Referenzendaten in biometrischen Systemen. In dieser Arbeit wird ein systematisches Evaluierungsframework entwickelt, das sich an die wesentlichen Kriterien und Anforderungen an biometrische Template-Protection-Verfahren festhält. Seine Anwendbarkeit wird durch die Analyse der verschiedenen Algorithmen demonstriert. Die in dieser Arbeit präsentierte Evaluierung ist grundlegend für eine vollständige Analyse. Darüber hinaus ermöglicht es einen Nachweis der Sicherheit und Einhaltung der Privatsphäre. Es schafft eine Basis für Zertifizierung und Benchmark der Template-Protection-Verfahren.

Biometric authentication is the process of recognizing a person by means of his\her psychological or behavioral traits. One of the most important issues faced by the biometric system developer is to protect the template obtained from the biometric of a person. Unimodal biometric system has some drawbacks such as noisy data, interclass variations and spoof attack. Multimodal biometric system has been developed to address the boundaries of unimodal biometric system and increase the security of template. In this paper, template security analysis of multimodal biometric system based of fingerprint and palmprint is proposed and implemented. Fuzzy vault scheme is employed to protect both the fingerprint and palmprint template. At enrollment, image processing techniques such as image enhancement, segmentation and bottom-hat filtering are applied on both the biometric to improve the quality and subsequently the most important features are extracted. Extracted features are concatenated. Combined features along with secret key are utilized to generate the database in the vault. During authentication, query images are sent as an input with the stored template to recover the key. Experimental results are shown that the proposed multi biometrics system performs well than the other methods considered for comparison.