基于重加密的随机映射指纹模板保护方案

doi:10.11959/j.issn.1000-436x.2018031

通信学报 ›› 2018, Vol. 39 ›› Issue (2): 122-134.doi: 10.11959/j.issn.1000-436x.2018031

基于重加密的随机映射指纹模板保护方案

贾姗^1,²,徐正全^1,²,胡传博^1,²,王豪^1,²

¹ 武汉大学测绘遥感信息工程国家重点实验室，湖北武汉 430079
² 武汉大学地球空间信息技术协同创新中心，湖北武汉 430079

修回日期:2018-01-13 出版日期:2018-02-01 发布日期:2018-03-28
作者简介:贾姗（1993-），女，山东莱芜人，武汉大学博士生，主要研究方向为信息安全、生物特征识别。|徐正全（1962-），男，湖北黄冈人，博士，武汉大学教授，主要研究方向为信息安全、隐私保护、图像处理等。|胡传博（1989-），男，黑龙江哈尔滨人，武汉大学博士生，主要研究方向为计算机视觉、空间信息处理。|王豪（1990-），男，河南驻马店人，武汉大学博士生，主要研究方向为数据挖掘、隐私保护。
基金资助:
武汉市应用基础研究计划基金资助项目(2017010201010114);国家自然科学基金资助项目(41671443);国家自然科学基金资助项目(41571426);国家重点基础研究发展计划（“973”计划）基金资助项目(2011CB302306)

Fingerprint template protection by adopting random projection based on re-encryption

Shan JIA^1,²,Zhengquan XU^1,²,Chuanbo HU^1,²,Hao WANG^1,²

¹ State Key Laboratory of Information Engineering in Surveying,Mapping and Remote Sensing,Wuhan University,Wuhan 430079,China
² Collaborative Innovation Center for Geospatial Technology,Wuhan University,Wuhan 430079,China

Revised:2018-01-13 Online:2018-02-01 Published:2018-03-28
Supported by:
Applied Basic Research Program of Wuhan(2017010201010114);The National Natural Science Foundation of China(41671443);The National Natural Science Foundation of China(41571426);The National Basic Research Program of China (973 Program)(2011CB302306)

摘要/Abstract

摘要：

针对基于随机映射（RP,random projection）的生物特征模板保护算法在模板生成和密钥管理中面临易被攻击而泄露用户隐私的问题，提出一种改进RP算法的指纹模板保护方案。首先，在随机映射的基础上，将变换域划分为相互独立的指纹特征匹配域和加噪干扰域；在子域内加噪后利用子随机映射矩阵交叉融合生成模板。同时，引入重加密机制实现对变换密钥（RP矩阵）的安全存储和传输。实验结果和分析表明，与现有的RP模板保护方法相比，所提方案具有更高的抵抗攻击能力并能保持RP算法的匹配性能和模板可撤销性。

关键词: 指纹隐私保护, 随机映射, 重加密, 安全认证

Abstract:

In random projection (RP) based biometric template protection methods,the generated template and key are vulnerable to attacks,which may cause the leakage of users’ privacy.To solve this problem,an improved RP-based fingerprint template protection method was proposed.First,based on the RP result,the proposed method divided the projection domain into fingerprint matching domain and noise adding domain that were mutually independent,then fused them with two sub-matrices of the random projection matrix and saved the result as template.In addition,re-encryption mechanism was introduced to realize secure storage and transmission of the key (RP matrix).Experimental results show that the proposed method can achieve stronger ability to resist different attacks than existing RP-based biometric template protection methods,and also guarantee high matching accuracy and revocation.

Key words: fingerprint privacy protection, random projection, re-encryption, secure authentication

中图分类号:

TP309.2

贾姗,徐正全,胡传博,王豪. 基于重加密的随机映射指纹模板保护方案[J]. 通信学报, 2018, 39(2): 122-134.

Shan JIA,Zhengquan XU,Chuanbo HU,Hao WANG. Fingerprint template protection by adopting random projection based on re-encryption[J]. Journal on Communications, 2018, 39(2): 122-134.

图/表 11

图1

图2

图3

图4

图5

表1

图6

图7

图8

表2

基于随机映射的生物特征模板保护方法存储开销对比"

方案	用户		用户终端		应用端
方案	存储内容	存储空间	存储内容	存储空间	存储内容	存储空间
无重加密机制	PRN	σ	—	—	$T$	m·n·l
对R重加密	—	—	pk ,sk	$\| G_{1} \| + \| ℤ_{p}^{*} \|$	$R_{e} \|\| T \|\| R_{2} \|\| i, r e k e y$	$(1.5 n^{2} + 1) l + (n^{2} + P^{2}) \| G_{1} \| + n^{2} \| G_{2} \|$
本文方案	—	—	pk ,sk	$\| G_{1} \| + \| ℤ_{p}^{*} \|$	$k_{e} \|\| R_{e} \|\| T \|\| R_{2} \|\| i, r e k e y$	$(2.5 n^{2} + 1) l + (1 + P^{2}) \| G_{1} \| + \| G_{2} \|$

表2

表3

本文方案与无重加密机制的计算开销对比"

方案及其计算开销	注册过程用户终端	注册过程应用端	认证过程用户终端	认证过程应用端
无重加密机制	t_T	—	t_T	t_M
计算开销/s	0.171 80	—	0.171 80	0.000 02
本文方案	$t_{T}' + t_{e_R} + t_{e 1_k} + t_{e_R_{2}}$	$t_{d_R_{2}}$	$t_{d_k} + t_{d_R} + t_{T}'$	$t_{e 2_k} + t_{M}'$
计算开销/s	0.466 70	0.107 10	0.319 90	0.054 10

表3

参考文献 30

[1]	CAVOUKIAN A , STOIANOV A . Biometric encryption[M]. Boston,USA: Springer US, 2011: 90-98.
[2]	NAGAR A . Biometric template security[M]. Switzerland: Springer International Publishing, 2012.
[3]	SANDHYA M , PRASAD M V N K . Biometric template protection:a systematic literature review of approaches and modalities[M]// Biometric Security and Privacy. Springer International Publishing, 2017: 323-370.
[4]	SANDHYA M , PRASAD M V N K , CHILLARIGE R R . Generating cancellable fingerprint templates based on Delaunay triangle feature set construction[J]. IET Biometrics, 2016,5(2): 131-139.
[5]	CAVOUKIAN A , SNIJDER M , STOIANOV A ,et al. Privacy and biometrics for authentication purposes:a discussion of untraceable biometrics and biometric encryption[M]// Ethics and Policy of Biometrics. Springer Berlin Heidelberg, 2010: 14-22.
[6]	BOULGOURIS N V , PLATANIOTIS K N MICHELI-TZANAKOU E . Biometric encryption:the new breed of untraceable biometrics[M]. Biometrics:Theory,Methods,and Applications.John Wiley ＆ Sons,Inc. 2009: 655-718.
[7]	ACHLIOPTAS D , . Database-friendly random projections[C]// The 12th ACM SIGMOD-SIGACT-SIGART Symposium on Principles of Data Base Systems. 2001: 274-281.
[8]	NGO D C L , TEOH A B J , GOH A . Biometric hash:high-confidence face recognition[J]. IEEE Transactions on Circuits and Systems for Video Technology, 2006,16(6): 771-775.
[9]	JIN Z , GOI B M , TEOH A ,et al. A two-dimensional random projected minutiae vicinity decomposition-based cancellable fingerprint template[J]. Security and Communication Networks, 2014,7(11): 1691-1701.
[10]	TEOH A B J , YUANG C T . Cancelable biometrics realization with multispace random projections[J]. IEEE Transactions on Systems,Man,and Cybernetics,Part B (Cybernetics), 2007,37(5): 1096-1106.
[11]	WANG Y , PLATANIOTIS K N . An analysis of random projection for changeable and privacy-preserving biometric verification[J]. IEEE Transactions on Systems,Man,and Cybernetics,Part B (Cybernetics), 2010,40(5): 1280-1293.
[12]	KHAN S H , AKBAR M A , SHAHZAD F ,et al. Secure biometric template generation for multi-factor authentication[J]. Pattern Recognition, 2015,48(2): 458-472.
[13]	YANG B , HARTUNG D , SIMOENS K ,et al. Dynamic random projection for biometric template protection[C]// 2010 Fourth IEEE International Conference on Biometrics:Theory Applications and Systems (BTAS). IEEE, 2010: 1-7.
[14]	ANZAKU E T , SOHN H , RO Y M . Multi-factor authentication using fingerprints and user-specific random projection[C]// 2010 12th International Asia-Pacific Web Conference (APWEB). 2010: 415-418.
[15]	PATEL V M , RATHA N K , CHELLAPPA R . Cancelable biometrics:a review[J]. IEEE Signal Processing Magazine, 2015,32(5): 54-65.
[16]	张宁, 臧亚丽, 田捷 . 生物特征与密码技术的融合—一种新的安全身份认证方案[J]. 密码学报, 2015,2(2): 159-176.
	ZHANG N , ZANG Y L , TIAN J . The integration of biometrics and cryptography-a new solution for secure identity authentication[J]. Journal of Cryptologic Research, 2015,2(2): 159-176.
[17]	DASGUPTA S , GUPTA A . An elementary proof of the Johnson-Lindenstrauss lemma[J]. International Computer Science Institute,Technical Report, 1999,22(1): 1-5.
[18]	FRANKL P , MAEHARA H . The Johnson-Lindenstrauss lemma and the sphericity of some graphs[J]. Journal of Combinatorial Theory,Series B, 1988,44(3): 355-362.
[19]	JASSIM S,AL-ASSAM H , SELLAHEWA H . Improving performance and security of biometrics using efficient and stable random projection techniques[C]// 6th International Symposium on Image and Signal Processing and Analysis. 2009: 556-561.
[20]	ARRIAGA R I , VEMPALA S . An algorithmic theory of learning:Robust concepts and random projection[C]// 40th Annual Symposium on Foundations of Computer Science. 1999: 616-623.
[21]	BLAZE M , BLEUMER G , STRAUSS M . Divertible protocols and atomic proxy cryptography[J]. Advances in CryptologyEUROCRYPT'98, 1998: 127-144.
[22]	AHMED M , HOSSAIN M A . Cloud computing and security issues in the cloud[J]. International Journal of Network Security ＆ Its Applications, 2014,6(1): 25.
[23]	LIU S , HU S , WENG J ,et al. A novel asymmetric three-party based authentication scheme in wearable devices environment[J]. Journal of Network and Computer Applications, 2016,60: 144-154.
[24]	PIRKER M , SLAMANIG D . A framework for privacy-preserving mobile payment on security enhanced arm TrustZone platforms[C]// 2012 IEEE 11th International Conference on Trust,Security and Privacy in Computing and Communications (TrustCom). 2012: 1155-1160.
[25]	周阿转, 俞一彪 . 采用特征空间随机映射的鲁棒性语音识别[J]. 计算机应用, 2012,32(07): 2070-2073.
	ZHOU A Z , YU Y B . Robust speech recognition by adopting random projection in feature space[J]. Journal of Computer Applications, 2012,32(07): 2070-2073.
[26]	ATENIESE G , FU K , GREEN M ,et al. Improved proxy re-encryption schemes with applications to secure distributed storage[J]. ACM Transactions on Information and System Security (TISSEC), 2006,9(1): 1-30.
[27]	XU Z , XIONG L , XU Y . On the provably secure CEW based on orthogonal decomposition[J]. Signal Processing:Image Communication, 2014,29(5): 607-617.
[28]	MAIO D , MALTONI D , CAPPELLI R ,et al. FVC2000:fingerprint verification competition[J]. IEEE Transactions on Pattern Analysis and Machine Intelligence, 2002,24(3): 402-412.
[29]	JAIN A K , PRABHAKAR S , HONG L ,et al. Filterbank-based fingerprint matching[J]. IEEE transactions on Image Processing, 2000,9(5): 846-859.
[30]	张玉清, 王晓菲, 刘雪峰 ,等. 云计算环境安全综述[J]. 软件学报, 2016,27(6): 1328-1348.
	ZHANG Y Q , WANG X F , LIU X F ,et al. Survey on cloud computing security[J]. Journal of Software, 2016,27(6): 1328-1348.

方案	不可逆性	已知密钥和模板	相似性攻击	交叉匹配攻击	统计攻击	重放攻击
文献[8]方案	√	√	√	√	×	×
文献[9]方案	√	×	√	×	×	×
文献[10]方案	√	×	√	×	×	×
文献[11]方案	√	√	×	×	×	×
文献[12]方案	√	√	√	√	×	×
文献[13]方案	√	√	√	√	×	×
文献[14]方案	√	×	√	×	×	×
本文方案	√	√	√	√	√	√

基于重加密的随机映射指纹模板保护方案

Fingerprint template protection by adopting random projection based on re-encryption

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 11

参考文献 30

相关文章 15

Metrics

推荐阅读 0

[1]	李瑞琪, 贾春福, 王雅飞. 基于NTRU的多密钥同态代理重加密方案及其应用[J]. 通信学报, 2021, 42(3): 11-22.
[2]	常相茂, 占俊, 王志伟. 低开销的NB-IoT节点群组身份安全认证协议[J]. 通信学报, 2021, 42(12): 152-162.
[3]	杨小东, 席婉婷, 王嘉琪, 陈艾佳, 王彩芬. 基于签密和区块链的车联网电子证据共享方案[J]. 通信学报, 2021, 42(12): 236-246.
[4]	牛淑芬,刘文科,陈俐霞,王彩芬,杜小妮. 基于联盟链的可搜索加密电子病历数据共享方案[J]. 通信学报, 2020, 41(8): 204-214.
[5]	闫宏强,王琳杰. 物联网中认证技术研究[J]. 通信学报, 2020, 41(7): 213-222.
[6]	唐鑫,周琳娜,单伟杰,刘丹. 基于阈值重加密的抗边信道攻击云数据安全去重方法[J]. 通信学报, 2020, 41(6): 98-111.
[7]	李颖莹,马建峰,苗银宾. 基于边缘计算的支持多密钥的加密图像检索[J]. 通信学报, 2020, 41(4): 14-26.
[8]	薛开平,周焕城,孟薇,李少华. 天地一体化网络无缝切换和跨域漫游场景下的安全认证增强方案[J]. 通信学报, 2019, 40(6): 138-147.
[9]	冯朝胜,罗王平,秦志光,袁丁,邹莉萍. 支持多种特性的基于属性代理重加密方案[J]. 通信学报, 2019, 40(6): 177-189.
[10]	刘建,鲜明,王会梅,荣宏. 面向移动云的属性基密文访问控制优化方法[J]. 通信学报, 2018, 39(7): 39-49.
[11]	苏铓,俞研,吴槟,付安民. 面向代理重加密算法的程序设计语言研究[J]. 通信学报, 2018, 39(6): 89-97.
[12]	苏铓,史国振,付安民,俞研,金伟. 基于代理重加密的云端多要素访问控制方案[J]. 通信学报, 2018, 39(2): 96-104.
[13]	张恩,裴瑶瑶,杜蛟. 基于RLWE的密文策略属性代理重加密[J]. 通信学报, 2018, 39(11): 129-137.
[14]	李菊雁,马春光,赵乾. 格上可重新拆分的门限多代理者的代理重加密方案[J]. 通信学报, 2017, 38(5): 157-164.
[15]	罗恩韬,王国军,陈淑红,PINIALKhan-butt. 移动社交网络中跨域代理重加密朋友发现隐私保护方案研究[J]. 通信学报, 2017, 38(10): 81-93.