Biometric encryption
Download as PPT, PDF8 likes4,173 views
Biometric encryption is a technique that securely binds a cryptographic key to a biometric template. During enrollment, a random key is linked to a user's biometric template using a binding algorithm. During verification, applying the same biometric will regenerate the key through a retrieval algorithm. This allows authentication while preventing storage of the actual biometric data. Biometric encryption offers advantages like improved security, ability to revoke compromised keys, and privacy by not retaining biometric images.
Biometric encryption
- 1. BIOMETRIC ENCRYPTION PRESENTED BY Divya Kottikkal
- 2. • INTRODUCTION • BIOMETRICS • CRYPTOGRAPHY • BIOMETRIC ENCRYPTION • BIOMETRIC ENCRYPTION ALGORITHM • ADVANTAGES • APPLICATION • SUMMARY
- 3. INTRODUCTION
- 4. • There are billions of computers in the world and they are connected to each other. • Security becomes a critical problem that must be solved by new reliable and robust identification, verification or cryptographic techniques • Traditional password or user-id systems are not secure enough to provide full access control to a system. • In order to improve the security of such systems biometric information could be incorporated into the passwords.
- 5. BIOMETRICS
- 6. • A biometric is defined as a unique, measurable, biological characteristic for recognizing or verifying the identity of a human being. • Statistically analyzing these biological characteristics is known as the science of biometrics.
- 7. • Biometric technologies for security includes recognition of • Faces • Fingerprints • Voice • Signature strokes • Iris and retina scans • Keystroke patterns • Ear shape • DNA • Body odor • Gait.
- 9. • Biometric identification consists of two stages Enrollment Verification/identification
- 10. ENROLLMENT • In enrollment stage, a sample of the biometric is acquired. • In order to decrease the high dimensionality ,a feature extraction phase is applied and form a template of the biometric.
- 11. VERIFICATION • In verification phase, these features are compared with the previously generated biometric template.
- 12. CRYPTOGRAPHY
- 13. • Cryptography is an important feature of computer security. • Encryption refers to algorithmic schemes that encode plain text into non-readable form or cyphertext using a “key” providing privacy. • The receiver of the encrypted text uses a "key" to decrypt the message, returning it to its original plain text form.
- 14. • In this scheme ,the security is dependent on the secrecy of the secret or private key. • Security of the cryptographic key is weak due to practical problems of remembering various passcodes or writing them down to avoid data loss. • Since the passcode is not directly tied to a user, the system is unable to differentiate between the legitimate user and the attacker. • Solution for this problem is ‘Biometric Encryption’.
- 16. • Biometric Encryption is a process that securely binds a PIN or a cryptographic key to a biometric, so that neither the key nor the biometric can be retrieved from the stored template. • The key is re-created only if the correct live biometric sample is presented on verification.
- 18. ENROLLMENT 110011001011… ……………..110 01011001…01 Randomly generated key Biometrically-encrypted key is stored Biometric Image 100110100010… ………………010 Biometric Template BE binding algorithm
- 19. VERIFICATION 101100101010… ………………000 Fresh Biometric Template 110011001011… ……………..110 Biometrically-encrypted key BE retrieval algorithm 01011001…01 Key retrieved Fresh Biometric Image
- 21. • The objective of the Biometric Encryption algorithm is to provide a mechanism for the linking and retrieval of a digital key using a biometric. • Biometric might be fingerprint, palmprint, face, iris or retina. • The resulting digital key is then used as a cryptographic key.
- 22. ALGORITHM • Correlation function • Enrollment phase • Verification phase
- 23. CORRELATION • Algorithm uses the entire image instead of using a feature-based approach. • In order to present the biometric input ,a correlation mechanism is applied.
- 24. • The correlation between the input image f1(x) and the obtained image during the verification phase f0(x) is formally defined as c( x) = FT− 1 {F1( X) F0( X) } FT -Fourier Transform
- 25. • The process of the Biometric Encryption does not extract a simple True/False system • It produces a more sophisticated output pattern which is linked during enrollment with a digital key and subsequently regenerated during verification to retrieve the same key.
- 26. ENROLLMENT • Enrollment phase contains three stages. E-1: Image Processing E-2: Key linking E-3: Identification code creation
- 27. FT FT-1 Hstored(u) id0 filter function identification code Link Algorithm STAGE E-2 k0 n-bit key of filter c 0(x) output pattern S bits of filter STAGE E-3 Identification code creation STAGE E-1 IMAGE PROCESSING
- 28. • E-1: Image Processing Combine a series of input fingerprint images with a random (phase) array to create two output arrays: Hstored (u) and c0 (x). • E-2: Key linking Link a cryptographic key, k0 , to the pattern, c0 (x), via the link algorithm. • E-3: Identification code creation Create an identification code, id0 , derived from the key, k0 .
- 29. VERIFICATION • Verification phase contains three stages V-1: Image Processing V-2: Key Retrieval V-3: Validation
- 30. Retrieval Algorithm FT STAGE C1(x) output pattern STAGE V-1 IMAGE PROCESSING STAGE V-3 k1 bits S of filter id1compareid0 Hstored(u) filter function FT -1 V-2
- 31. • V-1: Image Processing Combine Hstored (u), from the Bioscrypt, with a new series of input fingerprint images to create an output pattern, c1 (x). • V-2: Key Retrieval Extract a key, k1 , from c1 (x) using the retrieval algorithm. • V-3: Validate the key.
- 32. ADVANTAGES
- 33. BE technologies can enhance privacy and security. Some key advantages offered: 1. NO Retention of biometric image or template 2. Multiple / cancelable / revocable identifiers 3. Improved authentication security: stronger binding of user biometric & system identifier 4. Improved security of personal data and communications 5. Greater public confidence, acceptance, use à compliance with privacy & data protection laws
- 34. 1.No Retention of biometric image or template • Most privacy and security concerns derive from storage and misuse of the biometric data. • User retains control and use of their own biometric
- 35. 2.Multiple / cancelable / revocable identifiers • BE allows individuals to use one biometric for multiple accounts and identifiers without fear that identifiers will be linked together. • If an account identifier becomes compromised, there is less risk that all the other accounts will be compromised, i.e., no need to change one's fingers. • BE technologies make possible the ability to change or recomputed account identifiers; identifiers can be revoked or cancelled, and substituted for newly generated ones calculated from the same biometric.
- 36. 3.Improved authentication security • Stronger binding of user biometric & system identifier • Results are much stronger account identifiers: – longer, more complex identifiers – no need for user memorization – less susceptible to security attacks
- 37. 4.Improved security of personal data and communications • Since the key is one's own biometric, used locally, this technology could place a powerful tool in the hands of individuals
- 38. APPLICATIONS
- 39. • Biometric ticketing for events • Biometric boarding cards for air travel • Identification, credit and loyalty card systems • “Anonymous” (untraceable) labeling of sensitive records (medical, financial) • Consumer biometric payment systems • Access control to personal computing devices • Personal encryption products • Local or remote authentication to access files held by government and other various organizations
- 40. SUMMARY
- 41. • BE technologies exemplify the fundamental privacy and data protection principles • Although introducing biometrics into information systems may result in considerable benefits, it can also introduce many new security and privacy vulnerabilities, risks, and concerns. • Novel Biometric Encryption techniques can overcome many of those risks and vulnerabilities, resulting distinct advantages to both security and privacy.