Authentication Attacks on Projection-based Cancelable Biometric Schemes

Axel Durbet, Paul-Marie Grollemund, Pascal Lafourcade, Denis Migdal, Kevin Thiry-Atighehchi

2022

Abstract

Cancelable biometric schemes aim at generating secure biometric templates by combining user specific tokens, such as password, stored secret or salt, along with biometric data. This type of transformation is constructed as a composition of a biometric transformation with a feature extraction algorithm. The security requirements of cancelable biometric schemes concern the irreversibility, unlinkability and revocability of templates, without losing in accuracy of comparison. While several schemes were recently attacked regarding these requirements, full reversibility of such a composition in order to produce colliding biometric characteristics, and specifically presentation attacks, were never demonstrated to the best of our knowledge. In this paper, we formalize these attacks for a traditional cancelable scheme with the help of integer linear programming (ILP) and quadratically constrained quadratic programming (QCQP). Solving these optimization problems allows an adversary to slightly alter its fingerprint image in order to impersonate any individual. Moreover, in an even more severe scenario, it is possible to simultaneously impersonate several individuals.

Paper Citation

in Harvard Style

Durbet A., Grollemund P., Lafourcade P., Migdal D. and Thiry-Atighehchi K. (2022). Authentication Attacks on Projection-based Cancelable Biometric Schemes. In Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT, ISBN 978-989-758-590-6, pages 568-573. DOI: 10.5220/0011277100003283

in Bibtex Style

@conference{secrypt22,
author={Axel Durbet and Paul-Marie Grollemund and Pascal Lafourcade and Denis Migdal and Kevin Thiry-Atighehchi},
title={Authentication Attacks on Projection-based Cancelable Biometric Schemes},
booktitle={Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT,},
year={2022},
pages={568-573},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011277100003283},
isbn={978-989-758-590-6},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT,
TI - Authentication Attacks on Projection-based Cancelable Biometric Schemes
SN - 978-989-758-590-6
AU - Durbet A.
AU - Grollemund P.
AU - Lafourcade P.
AU - Migdal D.
AU - Thiry-Atighehchi K.
PY - 2022
SP - 568
EP - 573
DO - 10.5220/0011277100003283