TWC: Small: Protecting Privacy of Biometric Data throughout Computation

计算机视觉的进步使生物识别认证和识别变得比以前更可靠、更容易获得，这类数据的普遍使用可能远远超出传统的认证。保护高度敏感的生物特征的必要性是显而易见的，与用于身份验证目的的其他类型的数据不同，生物特征不能被撤销或用新值替换。这意味着任何生物特征数据的安全漏洞对个人的影响都远远超过其他敏感数据的丢失。以前，只有有限的机制来保护生物识别的隐私。为了解决缺乏适当保护机制的问题，该项目开发了新的技术，用于在生物特征数据在不完全信任或不安全的环境中处理和使用时加强对生物特征数据的隐私保护，这些环境和应用远远超出了比较两个生物特征代码的范围。该项目的范围包括(i)对生物特征数据进行安全的交互式计算，（ii）将生物特征计算安全外包给不受信任的服务器，以及（iii）有效验证外包计算结果的正确性。这项工作的一个明显好处是，它将加密设计与对真实生物特征数据的实际评估相结合，并将开发的工具集成到生物特征计算网格环境中。这项研究的结果有望在处理敏感生物特征数据方面实现和促进更安全的做法，包括利用不可信的计算能力，以及在不被允许共享数据的实体之间进行更广泛程度的合作。

Progress in computer vision makes biometric authentication and recognition become more reliable and readily available than before, with a potential for ubiquitous use of such data well beyond traditional authentication. The need to protect highly sensitive biometrics is apparent, which, unlike other types of data used for authentication purposes, cannot be revoked and replaced with a new value. This means that any breach in security of biometric data has far reaching consequences to the individual than loss of other sensitive data.Previously, only limited mechanisms for protecting privacy of biometry were available. To address the paucity of adequate protection mechanisms, this project develops novel techniques for enhancing privacy protection of biometric data when it is being processed and used in environments which are not fully trusted or secured in a broad set of contexts and applications that go well beyond comparing two biometric codes. The project's scope covers (i) secure interactive computation on biometric data, (ii) secure outsourcing of biometric computation to untrusted servers, and (iii) efficient verification of the correctness of the result of outsourced computation. A distinct benefit of this work is that it combines cryptographic design with practical evaluation on real biometric data, as well as includes integration of developed tools into a biometric computing grid environment. The outcomes of this research are expected to enable and promote safer practices in handing sensitive biometric data, including utilizing untrusted computing power, and a wider degree of collaboration between entities who are otherwise not permitted to share their data.