STTR Phase I: Improving Privacy and Security in Biometrics

STTR 第一阶段：提高生物识别技术的隐私和安全性

• 批准号: 0611283
• 负责人: James Wittenburg
• 金额: $ 10万
• 依托单位: Securics Incorporated
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-07-01 至 2007-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0611283&HistoricalAwards=false
• 关键词: STTR; Phase; Improving; Privacy; Security

This Small Business Technology Transfer (STTR) Phase I research project investigates novel technological approaches with strong theoretical backing, which improve privacy and security in biometrics. This proposal develops secure robust revocable biometric transforms, applicable across a range of biometrics to produce tokens that can be used for identify/verification/identification, but which protect user privacy. In particular, they support pseudo-nimiety, they cannot be matched across different applications/databases, and they can be revoked if they are compromised. The most private form of the transform allows a biometric-based verification, without the ability to do recognition or search, addressing another major privacy issue. The approach transforms the original signature into a revocable form that protects privacy while it supports a robust distance metric supporting the approximate matching required for effective biometrics. The robust distance metric, computed on the encoded form, has been proven to not decrease accuracy, but to potentially increase accuracy. Previous work on privacy and biometric has traded accuracy for privacy; preliminary testing on the proposed approach improved performance.The broader impact of this proposal is on society in terms of privacy. This proposal represents an emerging opportunity in the unique space of privacy-oriented research applied to the rapidly growing space of biometrics. It addresses the most privacy invasive identification technologies including fingerprints and DNA. While applications to DNA are important from a long-term privacy view, fingerprints are more important for near-term commercial and social impact because of expected growth from programs such as e-passports/visas, HSPD-12 and the de-facto national ID cards required by the Real-ID act as well as commercial applications such as Pay-By-Touch and BioPay. The proposal addresses critical questions regarding privacy and security for identity verification. The proposed technique provides public-key cryptographic security of the identity; supports matching encoded from, cannot be linked across different databases and is revocable. Our identity solution, technologically, stops most of the potential forms of abuse that raises privacy concerns, while providing a significant value to financial solutions and the potential for improved security to the nation.

这项小型企业技术转移（STTR）第一阶段研究项目研究了具有强大理论支持的新技术方法，这些方法可以提高生物识别技术的隐私和安全性。该提案开发了安全、健壮、可撤销的生物特征转换，适用于各种生物特征，以生成可用于识别/验证/识别的令牌，同时保护用户隐私。特别是，它们支持伪秩，它们不能跨不同的应用程序/数据库进行匹配，如果它们被破坏，它们可以被撤销。最私密的转换形式允许基于生物特征的验证，而不需要进行识别或搜索，解决了另一个主要的隐私问题。该方法将原始签名转换为可撤销的形式，保护隐私，同时支持鲁棒距离度量，支持有效生物识别所需的近似匹配。基于编码形式计算的鲁棒距离度量已被证明不会降低精度，反而可能提高精度。之前关于隐私和生物识别的工作是以准确性换取隐私；对该方法的初步测试提高了性能。这一提议的更广泛影响是在隐私方面对社会的影响。这一提议代表了在以隐私为导向的研究应用于快速发展的生物识别领域的独特空间中的一个新兴机会。它解决了最侵犯隐私的识别技术，包括指纹和DNA。从长期隐私的角度来看，DNA的应用是重要的，但由于电子护照/签证、HSPD-12、《真实身份法案》要求的事实上的国民身份证等项目以及触控支付和生物支付等商业应用的预期增长，指纹在近期的商业和社会影响方面更为重要。该提案解决了有关身份验证的隐私和安全的关键问题。该技术提供了身份的公钥加密安全性；支持匹配编码，不能跨不同数据库链接，并且是可撤销的。从技术上讲，我们的身份解决方案阻止了大多数可能引起隐私问题的滥用形式，同时为金融解决方案提供了重要价值，并有可能改善国家的安全。