Information Leakage in Fuzzy Commitment Schemes
Information Leakage in Fuzzy Commitment Schemes
复制标题
DOI：
10.1109/tifs.2010.2046984
复制
发表时间：
2010-06-01
影响因子：
6.8
通讯作者：
Willems, Frans M. J.
中科院分区：
文献类型：
--
作者：
Ignatenko, Tanya;Willems, Frans M. J.
1999年，Juels和Wattenberg提出了模糊承诺方案。该方案是一个具有选择密钥的二进制生物特征保密系统的具体实现。它成为设计生物特征保密系统的流行技术，因为它使用标准纠错码方便且易于实现。研究了模糊承诺方案中的隐私和安全泄漏问题。对生物特征数据统计的四种情况进行了分析，即，无记忆全对称、无记忆输入对称、无记忆、平稳遍历。首先，确定数据统计无记忆完全对称和无记忆输入对称情况下的可实现区域。对于一般的无记忆和平稳遍历的情况下，只有外部边界的可实现率泄漏区域。然而，这些界限是尖锐的系统奇偶校验码。在给定可达域（界）的条件下，对模糊承诺的最优性进行了评估。分析表明，模糊承诺只有在无记忆完全对称的情况下才是最优的，如果该方案运行在最大的秘密密钥率。此外，它表明，对于一般的无记忆和平稳遍历的情况下，该方案泄漏的秘密和生物特征数据的信息。
In 1999, Juels and Wattenberg introduced the fuzzy commitment scheme. This scheme is a particular realization of a binary biometric secrecy system with chosen secret keys. It became a popular technique for designing biometric secrecy systems, since it is convenient and easy to implement using standard error-correcting codes. This paper investigates privacy-and secrecy-leakage in fuzzy commitment schemes. The analysis is carried out for four cases of biometric data statistics, i.e., memoryless totally symmetric, memoryless input-symmetric, memoryless, and stationary ergodic. First, the achievable regions are determined for the cases when data statistics are memoryless totally symmetric and memoryless input-symmetric. For the general memoryless and stationary ergodic cases, only outer bounds for the achievable rate-leakage regions are provided. These bounds, however, are sharpened for systematic parity-check codes. Given the achievable regions (bounds), the optimality of fuzzy commitment is assessed. The analysis shows that fuzzy commitment is only optimal for the memoryless totally symmetric case if the scheme operates at the maximum secret-key rate. Moreover, it is demonstrated that for the general memoryless and stationary ergodic cases, the scheme leaks information on both the secret and biometric data.