Efficient and privacy-preserving biometric identification in cloud

Changhee Hahn, Junbeom Hur

Research output: Contribution to journalArticle

11 Citations (Scopus)

Abstract

With the rapid growth in the development of smart devices equipped with biometric sensors, client identification system using biometric traits are widely adopted across various applications. Among many biometric traits, fingerprint-based identification systems have been extensively studied and deployed. However, to adopt biometric identification systems in practical applications, two main obstacles in terms of efficiency and client privacy must be resolved simultaneously. That is, identification should be performed at an acceptable time, and only a client should have access to his/her biometric traits, which are not revocable if leaked. Until now, multiple studies have demonstrated successful protection of client biometric data; however, such systems lack efficiency that leads to excessive time utilization for identification. The most recently researched scheme shows efficiency improvements but reveals client biometric traits to other entities such as biometric database server. This violates client privacy. In this paper, we propose an efficient and privacy-preserving fingerprint identification scheme by using cloud systems. The proposed scheme extensively exploits the computation power of a cloud so that most of the laborious computations are performed by the cloud service provider. According to our experimental results on an Amazon EC2 cloud, the proposed scheme is faster than the existing schemes and guarantees client privacy by exploiting symmetric homomorphic encryption. Our security analysis shows that during identification, the client fingerprint data is not disclosed to the cloud service provider or fingerprint database server.

Original languageEnglish
Pages (from-to)135-139
Number of pages5
JournalICT Express
Volume2
Issue number3
DOIs
Publication statusPublished - 2016 Sep 1

Fingerprint

Biometrics
Identification (control systems)
Servers
Cryptography
Sensors

Keywords

  • Biometrics
  • Cloud
  • Identification
  • Privacy

ASJC Scopus subject areas

  • Artificial Intelligence
  • Computer Networks and Communications
  • Hardware and Architecture
  • Information Systems
  • Software

Cite this

Efficient and privacy-preserving biometric identification in cloud. / Hahn, Changhee; Hur, Junbeom.

In: ICT Express, Vol. 2, No. 3, 01.09.2016, p. 135-139.

Research output: Contribution to journalArticle

@article{bed2b64432eb467b80b0c98b399552d8,
title = "Efficient and privacy-preserving biometric identification in cloud",
abstract = "With the rapid growth in the development of smart devices equipped with biometric sensors, client identification system using biometric traits are widely adopted across various applications. Among many biometric traits, fingerprint-based identification systems have been extensively studied and deployed. However, to adopt biometric identification systems in practical applications, two main obstacles in terms of efficiency and client privacy must be resolved simultaneously. That is, identification should be performed at an acceptable time, and only a client should have access to his/her biometric traits, which are not revocable if leaked. Until now, multiple studies have demonstrated successful protection of client biometric data; however, such systems lack efficiency that leads to excessive time utilization for identification. The most recently researched scheme shows efficiency improvements but reveals client biometric traits to other entities such as biometric database server. This violates client privacy. In this paper, we propose an efficient and privacy-preserving fingerprint identification scheme by using cloud systems. The proposed scheme extensively exploits the computation power of a cloud so that most of the laborious computations are performed by the cloud service provider. According to our experimental results on an Amazon EC2 cloud, the proposed scheme is faster than the existing schemes and guarantees client privacy by exploiting symmetric homomorphic encryption. Our security analysis shows that during identification, the client fingerprint data is not disclosed to the cloud service provider or fingerprint database server.",
keywords = "Biometrics, Cloud, Identification, Privacy",
author = "Changhee Hahn and Junbeom Hur",
year = "2016",
month = "9",
day = "1",
doi = "10.1016/j.icte.2016.08.006",
language = "English",
volume = "2",
pages = "135--139",
journal = "ICT Express",
issn = "2405-9595",
publisher = "Korean Institute of Communications Information Sciences",
number = "3",

}

TY - JOUR

T1 - Efficient and privacy-preserving biometric identification in cloud

AU - Hahn, Changhee

AU - Hur, Junbeom

PY - 2016/9/1

Y1 - 2016/9/1

N2 - With the rapid growth in the development of smart devices equipped with biometric sensors, client identification system using biometric traits are widely adopted across various applications. Among many biometric traits, fingerprint-based identification systems have been extensively studied and deployed. However, to adopt biometric identification systems in practical applications, two main obstacles in terms of efficiency and client privacy must be resolved simultaneously. That is, identification should be performed at an acceptable time, and only a client should have access to his/her biometric traits, which are not revocable if leaked. Until now, multiple studies have demonstrated successful protection of client biometric data; however, such systems lack efficiency that leads to excessive time utilization for identification. The most recently researched scheme shows efficiency improvements but reveals client biometric traits to other entities such as biometric database server. This violates client privacy. In this paper, we propose an efficient and privacy-preserving fingerprint identification scheme by using cloud systems. The proposed scheme extensively exploits the computation power of a cloud so that most of the laborious computations are performed by the cloud service provider. According to our experimental results on an Amazon EC2 cloud, the proposed scheme is faster than the existing schemes and guarantees client privacy by exploiting symmetric homomorphic encryption. Our security analysis shows that during identification, the client fingerprint data is not disclosed to the cloud service provider or fingerprint database server.

AB - With the rapid growth in the development of smart devices equipped with biometric sensors, client identification system using biometric traits are widely adopted across various applications. Among many biometric traits, fingerprint-based identification systems have been extensively studied and deployed. However, to adopt biometric identification systems in practical applications, two main obstacles in terms of efficiency and client privacy must be resolved simultaneously. That is, identification should be performed at an acceptable time, and only a client should have access to his/her biometric traits, which are not revocable if leaked. Until now, multiple studies have demonstrated successful protection of client biometric data; however, such systems lack efficiency that leads to excessive time utilization for identification. The most recently researched scheme shows efficiency improvements but reveals client biometric traits to other entities such as biometric database server. This violates client privacy. In this paper, we propose an efficient and privacy-preserving fingerprint identification scheme by using cloud systems. The proposed scheme extensively exploits the computation power of a cloud so that most of the laborious computations are performed by the cloud service provider. According to our experimental results on an Amazon EC2 cloud, the proposed scheme is faster than the existing schemes and guarantees client privacy by exploiting symmetric homomorphic encryption. Our security analysis shows that during identification, the client fingerprint data is not disclosed to the cloud service provider or fingerprint database server.

KW - Biometrics

KW - Cloud

KW - Identification

KW - Privacy

UR - http://www.scopus.com/inward/record.url?scp=85032914647&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85032914647&partnerID=8YFLogxK

U2 - 10.1016/j.icte.2016.08.006

DO - 10.1016/j.icte.2016.08.006

M3 - Article

AN - SCOPUS:85032914647

VL - 2

SP - 135

EP - 139

JO - ICT Express

JF - ICT Express

SN - 2405-9595

IS - 3

ER -