A Cancellable and Privacy-Preserving Facial Biometric Authentication Scheme

Abstract

In recent years, biometric, or "who you are," authentication has grown rapidly in acceptance and use. Biometric authentication offers users the convenience of not having to carry a password, PIN, smartcard, etc. Instead, users will use their inherent biometric traits for authentication and, as a result, risk their biometric information being stolen. The security of users' biometric information is of critical importance within a biometric authentication scheme as compromised data can reveal sensitive information: race, gender, illness, etc. A cancellable biometric scheme, the "BioCapsule" scheme, proposed by researchers from Indiana University Purdue University Indianapolis, aims to mask users' biometric information and preserve users' privacy. The BioCapsule scheme can be easily embedded into existing biometric authentication systems, and it has been shown to preserve user-privacy, be resistant to several types of attacks, and have minimal effects on biometric authentication system accuracy. In this research we present a facial authentication system which employs several cutting-edge techniques. We tested our proposed system on several face databases, both with and without the BioCapsule scheme being embedded into our system. By comparing our results, we quantify the effects the BioCapsule scheme, and its security benefits, have on the accuracy of our facial authentication system.

Enabling Secure and Effective Biomedical Data Sharing through Cyberinfrastructure Gateways

“…Using the new Bio-Capsule (BC) authentication model [14] [15], BioCapsule-based role-wise authentication-authorization scheme was developed to realize role-based access control and data sharing [16]. The BC generation process is through key extraction from a Reference Subject (RS -a random physical object or image) and the user's biometric data.…”

“…The BC generation process is through key extraction from a Reference Subject (RS -a random physical object or image) and the user's biometric data. The key is then transformed and user and RS attributes were fused to generate the Bio-Capsule [16]. This user-friendly method of authentication allows the user to use face identification to login and meet rigorous security standards [17].…”