Analysis of Blind Secure Biometric Verification Protocol

A wide variety of systems requires reliable personal recognition schemes to either confirm or determine the identity of an individual requesting their services. Biometric authentication systems are primarily centered around template security, revocability, and privacy. A provably secure and blind biometric authentication protocol, which addresses the concerns of user’s privacy, template protection, and trust issues. The protocol is blind in the sense that it reveals only the identity, and no additional information about the user or the biometric to the authenticating server or vice-versa. As the protocol is based on asymmetric encryption of the biometric data, it captures the advantages of biometric authentication as well as the security of public key cryptography. The encryption also provides template protection, the ability to revoke enrolled templates, a and alleviates the concerns on privacy in widespread use of biometrics. The proposed approach makes no restrictive assumptions on the biometric data and is hence applicable to multiple biometric. Such a protocol has significant advantages over existing biometric cryptosystems which use a biometric to secure a secret key, which in turn is used for authentication.