An integrated framework combining Bio-Hashed minutiae template and PKCS15 compliant card for a better secure management of fingerprint cancelable templates

Rima Belguechi (1, 2) , Estelle Cherrier (1) , Christophe Rosenberger (1) , Samy Ait-Aoudia (2)

1 Equipe SAFE - Laboratoire GREYC - UMR6072
2 Ecole Nationale Supérieure d'Informatique,ESI, Algiers, Algeria

We address in this paper the problem of privacy in fingerprint biometric systems. Today, cancelable techniques have been proposed to deal with this issue. Ideally, such transforms are one-way. However, even if they are with provable security, they remain vulnerable when the user-specific key that achieves cancelability property is stolen. The prominence of the cancelable template confidentiality to maintain the irreversibility property was also demonstrated for many proposed constructions. To prevent possible coming attacks, it becomes important to securely manage this key as well as the transformed template in order to avoid them being leaked simultaneously and thus compromised. To better manage the user credentials of cancelable constructs, we propose a new solution combining a trusted architecture and a cancelable fingerprint template. Therefore, a Bio-Hashed minutiae template based on a chip matching algorithm is proposed. A pkcs15 compliant cancelable biometric system for fingerprint privacy preserving is implemented on a smartcard. This closed system satisfies the safe management of the sensitive templates. The proposed solution is proved to be well resistant to different attacks.

Mots clés: Cancelable template; Smartcard; Secure biometrics; Identity management; Fingerprint authentication

Domaines: Cryptographie et sécurité [cs.CR]

Rima Belguechi, Estelle Cherrier, Christophe Rosenberger, Samy Ait-Aoudia. An integrated framework combining Bio-Hashed minutiae template and PKCS15 compliant card for a better secure management of fingerprint cancelable templates. Elsevier Journal on Computers & Security, 2013, 15 p. ⟨hal-00999083⟩