On Biometric Encryption using Fingerprint and It's Security Evaluation

Biometric person authentication has been attracting considerable attention in recent years. Conventional biometric person authentication systems, however, simply store each user's template as-is on the system. If registered templates are not properly protected, the risk arises of template leakage to a third party and impersonation using biometric data restored from a template. We propose a technique that encrypts and stores the user template and uses a "fuzzy vault scheme" to generate secret data from the user template and the query biometric data. It incorporates a measure to prevent the secret data and the user template used to obtain the secret data from being recovered from information stored in the system, and it enables the secret data to be generated from the user's biometric data. In this paper, we introduce this technique and evaluate template security with it by simulating a fingerprint authentication system.