Multimodality to improve security and privacy in fingerprint authentication system

Abstract

With the pace of increasing online transactions and communication, the demand for security and privacy increases. To protect confidential information and to authenticate people electronically, several solutions already introduced. Traditional biometric systems that are based on single biometric usually suffer from problems like impostors' attack or hacking, unacceptable error rates. To improve security and privacy and system's reliability two or more biometrics of the same identity could be combined in a method that enhances the efficiency of the system. The biometric information, however, is irreplaceable information, when it is compromised. Thereby, one must give a special attention to protection of such information. We propose a novel protection technique for the biometric information, especially the feature information and the templates. The point of our proposal is securely embeds and extracts an iris template in a fingerprint image using a combined DWT and LSB based biometric watermarking algorithm in each authentication. The embedded data travel through insecure communication line like the internet, and they are used in matching process. This technique causes security against eavesdropping and replay attacks on the internet, because the watermark embedded transmitted data are used in the authentication session after watermark extraction.

Privacy and Identity Management for the Future Internet in the Age of Globalisation

“…Examples of on-site data centres include the U.S. Census Bureau Research Data Centers (RDC) [48] and the Australian Bureau of Statistics (ABS) On-site Data Laboratory [5].…”

“…48 With the judgment at hand, there should not be any issues as to the interpretation of the DPD's and eDP's provisions. However, if a national court had any doubts or wished to derogate from the CJEU's judgment, at least a court of last resort would be under an obligation to submit a reference for a preliminary ruling under Article 267 para.…”

“…3 and 4 DRIP to further specify these by means of regulations. Despite its recent enactment, this legislation has already been subject to 48 Cf. Genna, Messy Consequences for National Legislation following Annulment of EU Data Retention Directive, LSE Media Policy Project, available at: http://blogs.lse.ac.uk/ mediapolicyproject/2014/04/08/messy-consequences-for-national-legislations-following-annulmentof-eu-data-retention-directive/.…”

“…According to the Commission, EUROSUR does not intend to regulate the storage or cross border exchange of personal data 47 and therefore the "possibility for exchanging personal data in EUROSUR is very limited: At European level, Member States and Frontex are entitled only to exchange ship identification numbers." 48 Nevertheless, the limitation to the exchange of ship IDs has only found its way into the regulation regarding the European and the Pre-Frontier Situational Picture. 49 Furthermore, the processing of personal data is envisaged in the regulation in specific circumstances, even if they are described as exceptional.…”

“…The specific method comprises the strategies which pertain to the sensor, the set, rank and decision level. For the first one, in a concrete way, it is worth to be mentioned that this fusion level involves augmenting the vectors arising from the extractors and subjecting the vector to a transformation algorithm [35,48]. The elements can enhance the performance.…”