Leakage-resilient biometric-based remote user authentication with fuzzy extractors

• Main Authors: TIAN, Yangguang, LI, Yingjiu, SENGUPTA, Binanda, LI, Nan, SU, Chunhua
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2020
• Subjects: Leakage resilient; Remote user authentication; Cross platform setting; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/5137; https://ink.library.smu.edu.sg/context/sis_research/article/6140/viewcontent/Leakage_resilient_biometric_RUA_fuzzy_sv.pdf
• Institution: Singapore Management University

Fuzzy extractors convert biometrics and other noisy data into a cryptographic key for security applications such as remote user authentication. Leakage attacks, such as side channel attacks, have been extensively modelled and studied in the literature. However, to the best of our knowledge, leakage attacks to biometric-based remote user authentication with fuzzy extractors have never been studied rigorously. In this paper, we propose a generic framework of leakage-resilient and privacy-preserving biometric-based remote user authentication that allows an authorized user to securely authenticate herself to a remote authentication server using her biometrics. In particular, the authorized user relies only on her secret biometrics to perform a valid authentication - which is suitable for user authentications in a cross-platform setting.