CRII: SaTC: Searchable Encryption for Biometric Data

生物识别技术是现代公民身份的一部分。个人的移动的设备收集面部、虹膜、指纹和心电图数据。边境检查站收集旅客的生物识别信息。 国家身份证使用生物识别技术来识别个人。在许多应用中，大量用户的生物特征被一起存储在集中式数据库中。 生物识别技术的这种广泛和不断扩大的使用产生了隐私问题，因为生物识别技术与种族，性别和疾病风险因素等敏感属性相关。保护这些数据平衡了需求和公民隐私。 该项目设计了一个新的系统，允许识别，同时保留隐私的非相关个人查询时，集中的生物特征数据库。 系统设计使用密码学来提供严格的安全声明。可搜索加密允许数据库在不知道底层数据的情况下处理查询。 当前的生物识别特征在于重复读数之间的噪声。这个项目设计了两个系统，这两个系统都建立在可搜索加密和噪声容忍加密。 第一个系统结合了选择性局部敏感散列和可搜索加密，以检索与许多局部敏感散列输出匹配的记录。 第二个系统构建了一个内积加密的变体，它只检索关闭记录集。 将实施两种设计中的上级设计并进行基准测试。 任何可搜索加密设计的一个重要方面是其泄漏配置文件。 该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Biometrics are part of modern citizens' identity. Individuals' mobile devices collect facial, iris, fingerprint, and electrocardiogram data. Border checkpoints collect travelers' biometrics. National identity cards use biometrics to identify individuals. In many applications, a large group of users' biometrics are stored together in a centralized database. This type of widespread and expanding use of biometrics creates privacy concerns as biometrics are correlated to sensitive attributes such as race, gender, and disease risk factors. Protecting this data balances needs and citizens' privacy. This project designs a new system that allows identification while retaining privacy of non-relevant individuals when querying centralized biometric databases. The system design uses cryptography to provide rigorous security claims.Searchable encryption allows a database to process queries without knowing the underlying data. Current biometrics are characterized by noise between repeated readings. This project designs two systems which both build on searchable encryption and noise tolerant cryptography. The first system combines selective locality sensitive hashes and searchable encryption to retrieve records that match many locality sensitive hash outputs. The second system builds a variant of inner-product encryption that retrieves only the set of close records. The superior of the two designs will be implemented and benchmarked. An important aspect of any searchable encryption design is its leakage profile. As such, the implemented scheme's leakage is evaluated with respect to the known statistical properties of an identified biometric.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.