The Vulnerabilities Analysis of Fuzzy Vault Using Password

Author

Hong, Sumin ; Jeon, Woongryul ; Kim, Seungjoo ; Won, Dongho ; Park, Choonsik

Author_Institution

Inf. Security Group, Sungkyunkwan Univ., Suwon, South Korea

Volume

3

fYear

2008

fDate

13-15 Dec. 2008

Firstpage

76

Lastpage

83

Abstract

Fingerprint is immutable and unchangeable. Thus, if it is disclosed, owner of fingerprint cannot use his fingerprint any longer. Fuzzy vault is a cryptographic framework that makes secure template storage to bind the template with a uniformly random key. In order to keep fuzzy vault secure, various schemes are studied using special data like password. K.Nandakumar proposed a scheme for hardening a fingerprint minutiae-based fuzzy vault using password. However, that scheme has vulnerabilities against several attacks. In this paper, we analyze vulnerabilities of K.NandakumarÂ¿s scheme and propose a new scheme which is secure against various attacks to fuzzy vaults.

Keywords

cryptography; fingerprint identification; fuzzy set theory; cryptographic framework; fuzzy vault; password; Authentication; Biometrics; Cryptography; Cyclic redundancy check; Data mining; Fingerprint recognition; Information analysis; Information security; Polynomials; Secure storage; biometrics; fingerprint; fuzzy vault; password;

fLanguage

English

Publisher

ieee

Conference_Titel

Future Generation Communication and Networking, 2008. FGCN '08. Second International Conference on

Conference_Location

Hainan Island

Print_ISBN

978-0-7695-3431-2

Type

conf

DOI

10.1109/FGCN.2008.211

Filename

4734284