Zhou, Xuebing ; Kuijper, Arjan ; Veldhuis, Raymond ; Busch, Christoph (2011):
Quantifying Privacy and Security of Biometric Fuzzy Commitment.
p. 8, IEEE Computer Society Conference Publishing Services (CPS), Los Alamitos, Calif., International Joint Conference on Biometrics 2011, DOI: 10.1109/IJCB.2011.6117543,
[Conference or Workshop Item]

Abstract

Fuzzy commitment is an efficient template protection algorithm that can improve security and safeguard privacy of biometrics. Existing theoretical security analysis has proved that although privacy leakage is unavoidable, perfect security from information-theoretical points of view is possible when bits extracted from biometric features are uniformly and independently distributed. Unfortunately, this strict condition is difficult to fulfill in practice. In many applications, dependency of binary features is ignored and security is thus suspected to be highly overestimated. This paper gives a comprehensive analysis on security and privacy of fuzzy commitment regarding empirical evaluation. The criteria representing requirements in practical applications are investigated and measured quantitatively in an existing protection system for 3D face recognition. The evaluation results show that a very significant reduction of security and enlargement of privacy leakage occur due to the dependency of biometric features. This work shows that in practice, one has to explicitly measure the security and privacy instead of trusting results under non-realistic assumptions.

Send an inquiry

Show editorial Details