Robust Biometric Scheme Against Replay Attacks Using One-Time Biometric Templates - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Computers & Security Année : 2024

Robust Biometric Scheme Against Replay Attacks Using One-Time Biometric Templates

Résumé

User authentication is an important issue on the Internet and usually solved through static and often unique passwords. Another method is to use biometrics, but biometric data are sensitive and need to be protected. Protection schemes such as cancelable biometric template generation has appeared, but they are sensitive to replay attacks. In this paper, we propose an original method to generate one-time biometric templates for user authentication applications. This proposed scheme limits replay attacks, consisting of an attacker maliciously retransmitting an intercepted user's identity proof. Our method is generic: any biometric modality could be used, the identity verification is realized by the service/identity provider to be realistic. Biometric features are extracted from captures using deep learning and then protected with biohashing, a cancelable biometric scheme. Finally, a step consisting of cryptographic hashing and symmetric encryption guarantees the generation of a one-time, non-replayable template. We have tested our scheme on two common biometric databases, from faces and fingerprints, and the results confirm its efficiency and robustness to attacks given a rigorous threat model.
Fichier principal
Vignette du fichier
Robust Biometric Scheme Against Replay%0AAttacks Using One-Time Biometric Templates.pdf (4.38 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Licence : CC BY NC ND - Paternité - Pas d'utilisation commerciale - Pas de modification

Dates et versions

hal-04273908 , version 1 (07-11-2023)

Licence

Paternité - Pas d'utilisation commerciale - Pas de modification

Identifiants

Citer

Tanguy Gernot, Christophe Rosenberger. Robust Biometric Scheme Against Replay Attacks Using One-Time Biometric Templates. Computers & Security, 2024, 137, pp.103586. ⟨10.1016/j.cose.2023.103586⟩. ⟨hal-04273908⟩
78 Consultations
67 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More