Analysis of Blind Secure Biometric Verification Protocol

Abstract

A wide variety of systems requires reliable personal
recognition schemes to either confirm or determine the identity of an individual requesting their services. Biometric authentication systems are primarily centered around template security, revocability, and
privacy. A provably secure and blind biometric authentication
protocol, which addresses the concerns of user’s privacy, template protection, and trust issues. The protocol is blind in the sense that it reveals only the identity, and no additional information about the user
or the biometric to the authenticating server or vice-versa. As the protocol is based on asymmetric encryption of the biometric data, it captures the advantages of biometric authentication as well as the security of public key cryptography. The encryption also provides
template protection, the ability to revoke enrolled templates, a and alleviates the concerns on privacy in widespread use of biometrics. The proposed approach makes no restrictive assumptions on the biometric data and is hence applicable to multiple biometric. Such a protocol has significant advantages over existing biometric cryptosystems which use a biometric to secure a secret key, which in turn is used for authentication.