The Fuzzy Vault for fingerprints is Vulnerable to Brute Force Attack
The \textit{fuzzy vault} approach is one of the best studied and well accepted ideas for binding cryptographic security into biometric authentication. The vault has been implemented in connection with fingerprint data by Uludag and Jain. We show that this instance of the vault is vulnerable to brute force attack. An interceptor of the vault data can recover both secret and template data using only generally affordable computational resources. Some possible alternatives are then discussed and it is suggested that cryptographic security may be preferable to the one - way function approach to biometric security.
Code (0)
등록된 구현이 없습니다.
Similar Papers 제목 키워드 기반
Multi-Biometric Fuzzy Vault based on Face and Fingerprints
The fuzzy vault scheme has been established as cryptographic primitive suitable for privacy-preserving biometric authentication. To improve accuracy and privacy protection, biometric information of multiple characteristi…
Privacy PreservingDeep Face Fuzzy Vault: Implementation and Performance
Biometric technologies, especially face recognition, have become an essential part of identity management systems worldwide. In deployments of biometrics, secure storage of biometric information is necessary in order to …
Face RecognitionManagementPrivacy PreservingRetrievalA Fuzzy Brute Force Matching Method for Binary Image Features
Matching of binary image features is an important step in many different computer vision applications. Conventionally, an arbitrary threshold is used to identify a correct match from incorrect matches using Hamming dista…
Offline Signature-Based Fuzzy Vault (OSFV: Review and New Results
An offline signature-based fuzzy vault (OSFV) is a bio-cryptographic implementation that uses handwritten signature images as biometrics instead of traditional passwords to secure private cryptographic keys. Having a rel…
Continuous Implicit Authentication for Mobile Devices based on Adaptive Neuro-Fuzzy Inference System
As mobile devices have become indispensable in modern life, mobile security is becoming much more important. Traditional password or PIN-like point-of-entry security measures score low on usability and are vulnerable to …
Mobile Security