STTR Phase I: Improving Privacy and Security in Biometrics

这个小型企业技术转移(STTR)第一阶段研究项目研究了具有强大理论支持的新技术方法，这些方法提高了生物识别中的隐私和安全性。这一提议开发了安全、健壮、可撤销的生物特征转换，适用于一系列生物特征识别，以产生可用于身份/验证/身份识别的令牌，但保护用户隐私。特别是，它们支持伪Nimity，它们不能跨不同的应用程序/数据库匹配，并且如果它们被攻破，它们可以被撤销。最私密的转换形式允许基于生物特征的验证，而不能进行识别或搜索，从而解决了另一个主要的隐私问题。该方法将原始签名转换为可撤销的形式，保护隐私，同时支持稳健的距离度量，支持有效的生物特征识别所需的近似匹配。在编码形式上计算的稳健距离度量已被证明不会降低精度，但可能会提高精度。以前在隐私和生物识别方面的工作已经用准确性换取了隐私；对拟议方法的初步测试提高了性能。这项提议在隐私方面对社会产生了更广泛的影响。这一提议代表着独特的以隐私为导向的研究领域的一个新兴机会，这些研究应用于快速增长的生物识别领域。它解决了最具隐私侵入性的识别技术，包括指纹和DNA。虽然从长期隐私角度来看，DNA的应用很重要，但指纹对于近期的商业和社会影响更重要，因为预计电子护照/签证、HSPD-12和Real-ID ACT所需的事实上的国民身份证等项目以及触摸付费和生物支付等商业应用将带来增长。该提案涉及身份验证的隐私和安全方面的关键问题。提出的技术提供了身份的公钥密码安全；支持匹配编码自，不能跨不同的数据库链接，并且是可撤销的。我们的身份识别解决方案在技术上阻止了大多数引起隐私问题的潜在形式的滥用，同时为金融解决方案提供了重大价值，并有可能改善国家的安全。

This Small Business Technology Transfer (STTR) Phase I research project investigates novel technological approaches with strong theoretical backing, which improve privacy and security in biometrics. This proposal develops secure robust revocable biometric transforms, applicable across a range of biometrics to produce tokens that can be used for identify/verification/identification, but which protect user privacy. In particular, they support pseudo-nimiety, they cannot be matched across different applications/databases, and they can be revoked if they are compromised. The most private form of the transform allows a biometric-based verification, without the ability to do recognition or search, addressing another major privacy issue. The approach transforms the original signature into a revocable form that protects privacy while it supports a robust distance metric supporting the approximate matching required for effective biometrics. The robust distance metric, computed on the encoded form, has been proven to not decrease accuracy, but to potentially increase accuracy. Previous work on privacy and biometric has traded accuracy for privacy; preliminary testing on the proposed approach improved performance.The broader impact of this proposal is on society in terms of privacy. This proposal represents an emerging opportunity in the unique space of privacy-oriented research applied to the rapidly growing space of biometrics. It addresses the most privacy invasive identification technologies including fingerprints and DNA. While applications to DNA are important from a long-term privacy view, fingerprints are more important for near-term commercial and social impact because of expected growth from programs such as e-passports/visas, HSPD-12 and the de-facto national ID cards required by the Real-ID act as well as commercial applications such as Pay-By-Touch and BioPay. The proposal addresses critical questions regarding privacy and security for identity verification. The proposed technique provides public-key cryptographic security of the identity; supports matching encoded from, cannot be linked across different databases and is revocable. Our identity solution, technologically, stops most of the potential forms of abuse that raises privacy concerns, while providing a significant value to financial solutions and the potential for improved security to the nation.