A Survey of Security and Privacy Issues for Biometrics Based Remote Authentication in Cloud <s> Authentication Systems with Encrypted Biometrics Features <s> Abstract Human authentication is the security task whose job is to limit access to physical locations or computer network only to those with authorisation. This is done by equipped authorised users with passwords, tokens or using their biometrics. Unfortunately, the first two suffer a lack of security as they are easy being forgotten and stolen; even biometrics also suffers from some inherent limitation and specific security threats. A more practical approach is to combine two or more factor authenticator to reap benefits in security or convenient or both. This paper proposed a novel two factor authenticator based on iterated inner products between tokenised pseudo-random number and the user specific fingerprint feature, which generated from the integrated wavelet and Fourier–Mellin transform, and hence produce a set of user specific compact code that coined as BioHashing. BioHashing highly tolerant of data capture offsets, with same user fingerprint data resulting in highly correlated bitstrings. Moreover, there is no deterministic way to get the user specific code without having both token with random data and user fingerprint feature. This would protect us for instance against biometric fabrication by changing the user specific credential, is as simple as changing the token containing the random data. The BioHashing has significant functional advantages over solely biometrics i.e. zero equal error rate point and clean separation of the genuine and imposter populations, thereby allowing elimination of false accept rates without suffering from increased occurrence of false reject rates. <s> BIB001 </s> A Survey of Security and Privacy Issues for Biometrics Based Remote Authentication in Cloud <s> Authentication Systems with Encrypted Biometrics Features <s> Reliable information security mechanisms are required to combat the rising magnitude of identity theft in our society. While cryptography is a powerful tool to achieve information security, one of the main challenges in cryptosystems is to maintain the secrecy of the cryptographic keys. Though biometric authentication can be used to ensure that only the legitimate user has access to the secret keys, a biometric system itself is vulnerable to a number of threats. A critical issue in biometric systems is to protect the template of a user which is typically stored in a database or a smart card. The fuzzy vault construct is a biometric cryptosystem that secures both the secret key and the biometric template by binding them within a cryptographic framework. We present a fully automatic implementation of the fuzzy vault scheme based on fingerprint minutiae. Since the fuzzy vault stores only a transformed version of the template, aligning the query fingerprint with the template is a challenging task. We extract high curvature points derived from the fingerprint orientation field and use them as helper data to align the template and query minutiae. The helper data itself do not leak any information about the minutiae template, yet contain sufficient information to align the template and query fingerprints accurately. Further, we apply a minutiae matcher during decoding to account for nonlinear distortion and this leads to significant improvement in the genuine accept rate. We demonstrate the performance of the vault implementation on two different fingerprint databases. We also show that performance improvement can be achieved by using multiple fingerprint impressions during enrollment and verification. <s> BIB002 </s> A Survey of Security and Privacy Issues for Biometrics Based Remote Authentication in Cloud <s> Authentication Systems with Encrypted Biometrics Features <s> Biometrics-based authentication systems offer obvious usability advantages over traditional password and token-based authentication schemes. However, biometrics raises several privacy concerns. A biometric is permanently associated with a user and cannot be changed. Hence, if a biometric identifier is compromised, it is lost forever and possibly for every application where the biometric is used. Moreover, if the same biometric is used in multiple applications, a user can potentially be tracked from one application to the next by cross-matching biometric databases. In this paper, we demonstrate several methods to generate multiple cancelable identifiers from fingerprint images to overcome these problems. In essence, a user can be given as many biometric identifiers as needed by issuing a new transformation "key". The identifiers can be cancelled and replaced when compromised. We empirically compare the performance of several algorithms such as Cartesian, polar, and surface folding transformations of the minutiae positions. It is demonstrated through multiple experiments that we can achieve revocability and prevent cross-matching of biometric databases. It is also shown that the transforms are noninvertible by demonstrating that it is computationally as hard to recover the original biometric identifier from a transformed version as by randomly guessing. Based on these empirical results and a theoretical analysis we conclude that feature-level cancelable biometric construction is practicable in large biometric deployments <s> BIB003 </s> A Survey of Security and Privacy Issues for Biometrics Based Remote Authentication in Cloud <s> Authentication Systems with Encrypted Biometrics Features <s> A three-factor authentication scheme combines biometrics with passwords and smart cards to provide high-security remote authentication. Most existing schemes, however, rely on smart cards to verify biometric characteristics. The advantage of this approach is that the user's biometric data is not shared with remote server. But the disadvantage is that the remote server must trust the smart card to perform proper authentication which leads to various vulnerabilities. To achieve truly secure three-factor authentication, a method must keep the user's biometrics secret while still allowing the server to perform its own authentication. Our method achieves this. The proposed scheme fully preserves the privacy of the biometric data of every user, that is, the scheme does not reveal the biometric data to anyone else, including the remote servers. We demonstrate the completeness of the proposed scheme through the GNY (Gong, Needham, and Yahalom) logic. Furthermore, the security of our proposed scheme is proven through Bellare and Rogaway's model. As a further benefit, we point out that our method reduces the computation cost for the smart card. <s> BIB004 </s> A Survey of Security and Privacy Issues for Biometrics Based Remote Authentication in Cloud <s> Authentication Systems with Encrypted Biometrics Features <s> Concerns on widespread use of biometric authentication systems are primarily centered around template security, revocability, and privacy. The use of cryptographic primitives to bolster the authentication process can alleviate some of these concerns as shown by biometric cryptosystems. In this paper, we propose a provably secure and blind biometric authentication protocol, which addresses the concerns of user's privacy, template protection, and trust issues. The protocol is blind in the sense that it reveals only the identity, and no additional information about the user or the biometric to the authenticating server or vice-versa. As the protocol is based on asymmetric encryption of the biometric data, it captures the advantages of biometric authentication as well as the security of public key cryptography. The authentication protocol can run over public networks and provide nonrepudiable identity verification. The encryption also provides template protection, the ability to revoke enrolled templates, and alleviates the concerns on privacy in widespread use of biometrics. The proposed approach makes no restrictive assumptions on the biometric data and is hence applicable to multiple biometrics. Such a protocol has significant advantages over existing biometric cryptosystems, which use a biometric to secure a secret key, which in turn is used for authentication. We analyze the security of the protocol under various attack scenarios. Experimental results on four biometric datasets (face, iris, hand geometry, and fingerprint) show that carrying out the authentication in the encrypted domain does not affect the accuracy, while the encryption key acts as an additional layer of security. <s> BIB005 </s> A Survey of Security and Privacy Issues for Biometrics Based Remote Authentication in Cloud <s> Authentication Systems with Encrypted Biometrics Features <s> In this paper, we propose an efficient biometric-based remote user authentication scheme using smart cards, in which the computation cost is relatively low compared with other related schemes. The security of the proposed scheme is based on the one-way hash function, biometrics verification and smart card. Moreover, the proposed scheme enables the user to change their passwords freely and provides mutual authentication between the users and the remote server. In addition, many remote authentication schemes use timestamps to resist replay attacks. Therefore, synchronized clock is required between the user and the remote server. In our scheme, it does not require synchronized clocks between two entities because we use random numbers in place of timestamps. <s> BIB006 </s> A Survey of Security and Privacy Issues for Biometrics Based Remote Authentication in Cloud <s> Authentication Systems with Encrypted Biometrics Features <s> As part of the security within distributed systems, various services and resources need protection from unauthorized use. Remote authentication is the most commonly used method to determine the identity of a remote client. This paper investigates a systematic approach for authenticating clients by three factors, namely password, smart card, and biometrics. A generic and secure framework is proposed to upgrade two-factor authentication to three-factor authentication. The conversion not only significantly improves the information assurance at low cost but also protects client privacy in distributed systems. In addition, our framework retains several practice-friendly properties of the underlying two-factor authentication, which we believe is of independent interest. <s> BIB007 </s> A Survey of Security and Privacy Issues for Biometrics Based Remote Authentication in Cloud <s> Authentication Systems with Encrypted Biometrics Features <s> Biometric template protection techniques are able to provide a solution for vulnerability which compromises biometric template. These are expected to be useful for remote biometric authentication. However, there were no supported standard evaluation method, thus making these technology not fully trusted. The draft Recommendation ITU-T X.gep: 'A guideline for evaluating telebiometric template protection techniques' which is currently under development at ITU-T SG 17 Question 9 (telebiometrics) aims to fill this need. ITU-T X.gep describes a general guideline for testing and reporting the performance of biometric template protection techniques based on biometric cryptosystem and cancellable biometrics. This guideline specifies two reference models for evaluation which use biometric template protection techniques in telebiometrics system. Then, it defines the metrics, procedures, and requirements for testing and evaluating the performance of the biometric template protection techniques. In addition, this Recommendation ITU-T X.gep has been approved at April 2012, and pre-published as ITU-T X.1091. <s> BIB008 </s> A Survey of Security and Privacy Issues for Biometrics Based Remote Authentication in Cloud <s> Authentication Systems with Encrypted Biometrics Features <s> Recently, to achieve privacy protection using biometrics, Fan and Lin proposed a three-factor authentication scheme based on password, smart card and biometrics. However, the authors have found that Fan and Lin's proposed scheme (i) has flaws in the design of biometrics privacy, (ii) fails to maintain a verification table, making it vulnerable to stolen-verifier attack and modification attack, and (iii) is vulnerable to insider attacks. Thus, the authors propose an elliptic curve cryptography-based authentication scheme that is improved with regard to security requirements. The authors’ proposed scheme overcomes the flaws of Fan and Lin's scheme and is secured from attacks. Furthermore, the authors have presented a security analysis of their scheme to show that their scheme is suitable for the biometric systems. <s> BIB009 </s> A Survey of Security and Privacy Issues for Biometrics Based Remote Authentication in Cloud <s> Authentication Systems with Encrypted Biometrics Features <s> A large portion of system breaches are caused by authentication failure, either during the login process or in the post-authentication session; these failures are themselves related to the limitations associated with existing authentication methods. Current authentication methods, whether proxy based or biometrics based, are not user-centric and/or endanger users' (biometric) security and privacy. In this paper, we propose a biometrics based user-centric authentication approach. This method involves introducing a reference subject (RS), securely fusing the user's biometrics with the RS, generating a BioCapsule (BC) from the fused biometrics, and employing BCs for authentication. Such an approach is user friendly, identity bearing yet privacy-preserving, resilient, and revocable once a BC is compromised. It also supports “one-click sign-on” across systems by fusing the user's biometrics with a distinct RS on each system. Moreover, active and non-intrusive authentication can be automatically performed during post-authentication sessions. We formally prove that the secure fusion based approach is secure against various attacks. Extensive experiments and detailed comparison with existing approaches show that its performance (i.e., authentication accuracy) is comparable to existing typical biometric approaches and the new BC based approach also possesses many desirable features such as diversity and revocability. <s> BIB010
Instead of storing original biometrics, transformed biometrics and transformation are stored in cloud database. Biometrics template protection BIB008 scheme can be categorized into two ways, (i) Biometric Cryptosystem, (ii) Feature Transformation. Biometric cryptosystem includes key binding (Fuzzy Vault), and key generation (Fuzzy Extractor). Features can be generally transformed either by biometric salting or biohashing and non-invertible transformation or cancellable biometrics template. For data protection, biometrics templates can be encrypted by chaotic encryption method  , which makes the system more robust against attacks. It becomes dynamic by using the concept of one time biometrics. Blind protocol BIB002 could be used on any biometrics feature to reveal only identity without any additional information about the user. Real identity of the user is hidden to the server to provide better privacy by making the protocol completely blind. It is also secure under variety of attacks. In blind authentication, focus is on user's privacy, template protection, and trust issue. Cryptobiometric authentication protocol carries out authentication in fully automatic fuzzy vault BIB005 , which aligns transformed template and query minutiae set of fingerprint without leaking data. Bio-capsule BIB010 is user-friendly technique adaptive to any environment. It provides security even if authentication server is compromised. It can be applied to several biometrics. This irreversible cryptographic hash function BIB001 is completely independent from any operating threshold. Non-invertible Gabor transform BIB003 is resistant to minor translation error and rotation distortion. In BIB003 , user can be given number of cancellable biometric identifiers created from fingerprint image according to the requirement by issuing a new transformation key. The identifiers can be cancelled and replaced when compromised. User's biometrics can be verified using bio-hashing BIB001 . This scheme is efficient due to usage of one-way hash function and XOR operations. Remote user authentication use nonce or long pseudorandom numbers and timestamps for better security and strong mutual authentication between user and server. Sometimes accuracy level of biometrics can be enhanced by fusing it with multiple factors. Smartcard based authentication uses biometrics along with password and smart card. According to Li et al.'s two factor authentication scheme BIB006 , user tries to login to remote server by inserting smart card into card reader and input personal biometrics for verification. It fails to provide strong authentication. Fan et al. BIB004 proposed a three-factor authentication scheme by fusing password, smart card and biometrics. Yeh et al. BIB009 proposed an elliptic curve cryptography-based authentication scheme that is improved according to security requirements. However, it is seen from the comparative study of different multi-factor biometrics authentication schemes, that Huang et al.'s proposal BIB007 on generic framework based on three factor remote user authentication provides better results from the aspects of security and privacy. This type of authentication is flexible in nature. User's biometrics traits are kept secret from the server to enhance privacy and to avoid single point of failure.