改进的可撤销指纹Fuzzy Vault方案

doi:10.3969/j.issn.1001-2400.2011.04.031

J4 ›› 2011, Vol. 38 ›› Issue (4): 173-180.doi: 10.3969/j.issn.1001-2400.2011.04.031

• 研究论文 • 上一篇

改进的可撤销指纹Fuzzy Vault方案

张镕麟;刘而云;赵恒;庞辽军

(西安电子科技大学生命科学技术学院，陕西西安 710071)

收稿日期:2010-10-17 出版日期:2011-08-20 发布日期:2011-09-28
作者简介:张镕麟(1984-)，女，西安电子科技大学博士研究生，E-mail: zhangrongling@life.xidian.edu.cn．
基金资助:
国家自然科学基金项目资助项目(60902083, 60803151, 60875018);北京市自然科学基金重点资助项目(4091004)

Improved cancelable fingerprint fuzzy vault system

ZHANG Ronglin;LIU Eryun;ZHAO Heng;PANG Liaojun

(School of Life Sciences and Technology, Xidian Univ., Xi'an 710071， China)

Received:2010-10-17 Online:2011-08-20 Published:2011-09-28

摘要/Abstract

摘要：

Fuzzy Vault系统是生物特征加密(Biometric Encryption，BE)领域中广泛应用的密钥绑定框架，适用于集合特征(例如指纹细节点)与密钥的绑定．然而，Vault模板中包含了真实指纹细节点特征，攻击者可以从多个发布的Vault模板中获取真实指纹信息，因而严重威胁到用户的隐私和密钥安全．笔者提出一种改进的可撤销指纹Fuzzy Vault方案．首先，基于口令构造一个不可逆变换函数，应用该变换函数对细节点特征进行变换，然后使用变换后的细节点输入Fuzzy Vault系统．攻击者即使得到多个应用系统上的Vault也不能获得原始指纹细节点特征，且用户可以通过随时更换口令来发布新的Vault模板．在FVC2002 DB2上的实验表明，所提出的方案能有效降低交叉匹配带来的安全隐患，提高系统安全性．

关键词: 可撤销生物特征, 双因子认证, fuzzy vault, 生物特征加密, 指纹识别

Abstract:

Fuzzy vault has been widely applied in biometric encryption domain for key binding, suitable for set feature representation, such as minutiae set of fingerprint image. However, with the real minutia points contained in vault, fuzzy vault is suffered from cross matching problem, which makes attackers easily obtain real minutia information from multiple vault templates and threatens user privacy and secret key security. In this paper, an improved cancelable fuzzy vault scheme is proposed, in which an one-way function based on password is constructed to transform original minutia information and then the transformed minutiae are fed to fuzzy vault system. The attackers can not obtain the original minutia features even though multiple vaults are at hand, and the users can reissue a new vault template by changing password. Experimental results on FVC2002 DB2 show that the proposed method can effectively reduce the hidden troubles and increase security of system.

Key words: cancelable biometric, two factor authentication, fuzzy vault, biometric encryption, fingerprint recognition

中图分类号:

TP301

张镕麟;刘而云;赵恒;庞辽军. 改进的可撤销指纹Fuzzy Vault方案[J]. J4, 2011, 38(4): 173-180.

ZHANG Ronglin;LIU Eryun;ZHAO Heng;PANG Liaojun. Improved cancelable fingerprint fuzzy vault system[J]. J4, 2011, 38(4): 173-180.

参考文献

［1］ Cavoukian A, Stoianov A. Biometric Encryption: a Positive-sum Technology That Achieves Strong Authentication, Security and Privacy ［R/OL］. ［2010-05-20］. http://www.ipc.on.ca.
［2］ Bodo A. Method for Producing a Digital Signature with Aid of a Biometric Feature. German Patent DE 42 43 908 A1 ［P/OL］. 1994［2010-05-20］. http://depatisnet.dpma.de/ipc/recherchex.do
［3］ Juels A, Wattenberg M. A Fuzzy Commitment Scheme ［C］//Proceedings of 6th ACM Conference on Computer and Communications Security. New York: ACM Press, 1999: 28-36.
［4］ Dodis Y, Ostrovsky R, Reyzin L, et al. Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data ［J］. SIAM Journal on Computing, 2008, 38(1): 97-139.
［5］ Linnartz J P, Tuyls P. New Shielding Functions to Enhance Privacy and Prevent Misuse of Biometric Templates ［C］//4th Conference on Audio and Video Based Person Authentication. New York: Springer-Verlag, 2003: 393-402.
［6］ Hao F, Anderson R, Daugman J. Combining Crypto with Biometrics Effectively ［J］. IEEE Trans on Computers, 2006, 55(9): 1081-1088.
［7］ Juels A, Sudan M. A Fuzzy Vault Scheme ［C］//Proceedings of IEEE International Symposium on Information Theory. Lausanne: IEEE, 2002: 408.
［8］ Uludag U, Pankanti S, Jain A K. Fuzzy Vault for Fingerprints ［C］//Proceedings of the 5th Conference on Audio-and Video-based Biometric Person Authentication. New York: Springer-Verlag, 2005: 310-319.
［9］ Nandakumar K, Jain A K, Pankanti S. Fingerprint-Based Fuzzy Vault: Implementation and Performance ［J］. IEEE Trans on Information Forensics and Security, 2007, 2(4): 744-757.
［10］ Lee Y J, Park K R, Lee S J, et al. A New Method for Generating an Invariant Iris Private Key Based on the Fuzzy Vault System ［J］. IEEE Trans on Systems, Man, and Cybernetics—Part B: Cybernetics, 2008, 38(5): 1302-1313.
［11］ Franssen T, Zhou X. Fuzzy Vault for 3D Face Recognition Systems ［C］//International Conference on Intelligent Information Hiding and Multimedia Signal Processing. Washington DC: IEEE Computer Society, 2008: 1069-1074.
［12］ Umut U, Jain A K. Securing Fingerprint Template: Fuzzy Vault with Helper Data ［C］//Proceedings of the Conference on Computer Vision and Pattern Recognition Workshops. New York: IEEE Computer Society, 2006: 163.
［13］ Yang S L, Schaumont P, Verbauwhede I. Microcoded Coprocessor for Embedded Secure Biometric Authentication Systems ［C］//Proceedings of the 3rd IEEE/ACM/IFIP International Conference on Hardware/Software Codesign and System Synthesis. Jersey City: ACM Press, 2005: 130-135.
［14］ Nagar A, Chaudhury S. Biometrics Based Asymmetric Cryptosystem Design Using Modified Fuzzy Vault Scheme ［C］//Proceedings of the 18th International Conference on Pattern Recognition. Washington DC: IEEE Computer Society, 2006: 537-540.
［15］ Moon D, Lee S, Jung S, et al. Fingerprint Template Protection Using Fuzzy Vault ［C］//International Conference on Computational Science and Its Applications. Malaysia: Springer-Verlag, 2007: 1141-1151.
［16］ Scheirer W J, Boult T E. Cracking Fuzzy Vaults and Biometric Encryption ［C］//Biometrics Symposium.Baltimore: IEEE, 2007: 1-6.
［17］ Hong S M, Jeon W, Kim S, et al. The Vulnerabilities Analysis of Fuzzy Vault using Password ［C］//International Conference on Future Generation Communication and Networking. Washington DC: IEEE Computer Society, 2008: 76-83.
［18］ Mihailescu P. The Fuzzy Vault for Fingerprints is Vulnerable to Brute Force Attack ［J/OL］. ［2010-06-03］. http://www.uni-math.gwdg.de/preda/mihailescu-papers/vault.pdf.
［19］ Nandakumar K, Nagar A, Jain A K. Hardening Fingerprint Fuzzy Vault Using Password ［C］//Proceedings of International Conference on Biometrics. South Korea: Springer-Verlag, 2007: 927-937.
［20］ Maio D, Maltoni D, Wayman J L, et al. FVC2002: Second Fingerprint Verification Competition ［C］//Proceedings of International Conference on Pattern Recognition. Quebec City: Springer-Verlag, 2002: 811-814.
［21］ Chikkerur S, Cartwright A N, Govindaraju V. Fingerprint Enhancement Using STFT Analysis ［J］. Pattern Recognition, 2007, 40(1): 198-211.
［22］ Shi Z, Govindaraju V. A Chaincode Based Scheme for Fingerprint Feature Extraction ［J］. Pattern Recognition Letters, 2006, 27(5): 462-468.

[1]	王磊;史亚;姬红兵. 基于多集典型相关分析的雷达辐射源指纹识别[J]. J4, 2013, 40(2): 164-171.
[2]	卢朝阳;张岗山;刘琳. 指纹识别系统性能评价方法[J]. J4, 2002, 29(6): 804-809.

改进的可撤销指纹Fuzzy Vault方案

Improved cancelable fingerprint fuzzy vault system

PDF (PC)

赞

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 2

Metrics

本文评价

推荐阅读 0