Abstract
Widespread use of iris biometric-based authentication makes it vulnerable to several attacks like template attack, replay attack, print attack. Several approaches have been proposed to mitigate each attack individually but nothing could be found, in the literature, that handles them collectively. A complete end-to-end system is required that shall be capable to handle these attacks together rather than just focusing on a particular type of attack. In this paper, we propose a system, which is capable of handling replay attack and template-based attack and paves a path to the evolution of a complete secured system. A non-deterministic approach for iris recognition, based on robust regions, proposed earlier (Gupta and Sehgal in Pattern Anal Appl 1–13 (2018), [1]) has been used to mitigate template-based attack along with replay attack. Biometric-based key generation is one of the techniques to evade the template-based attack. It requires a key generation to authenticate the user. The robust regions are further shown here to be effective in iris key generation as well. This eludes the necessity of saving iris template and the use of biometric keys for user authentication. The entropy of our system is calculated as 57 bits which shows the effectiveness of the proposed approach.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
R. Gupta, P. Sehgal, Non-deterministic approach to allay replay attack on iris biometric. Pattern Anal. Appl. 1–13 (2018)
J. Daugman, Probing the uniqueness and randomness of IrisCodes: results from 200 billion iris pair comparisons. Proc. IEEE 94, 1927–1935 (2006)
R. Gupta, P. Sehgal, A survey of attacks on iris biometric systems. Int. J. Biometrics, Indersci. 8, 145–178 (2016)
http://www.windowscentral.com/how-iris-scanner-lumia-950-and-950-xl-works
N.K. Ratha, J.H. Connell, R.M. Bolle, Enhancing security and privacy in biometrics-based authentication systems. IBM Syst. J. 40, 614–634 (2001)
O. Ouda, N. Tsumura, T. Nakaguchi, Tokenless cancelable biometrics scheme for protecting iriscodes, in Proceedings of 20th International Conference on Pattern Recognition (ICPR) (IEEE, New York, 2010), pp. 882–885
F. Hao, R. Anderson, J. Daugman, Combining crypto with biometrics effectively. IEEE Trans. Comput. 9, 1081–1088 (2006)
R. Arjona, I. Baturone, A fingerprint biometric cryptosystem in FPGA, in 2015 IEEE International Conference on Industrial Technology (ICIT), pp. 1554–1559 (2015)
Z. Jina, A. Beng, J. Teohb, B.-M. Goia, Y.-H. Taya, Biometric cryptosystems: a new biometric key binding and its implementation for fingerprint minutiae-based representation. Pattern Recognit. 56, 50–62 (2016)
I. Natgunanathan, A. Mehmood, Y. Xiang, Protection of privacy in biometric data. IEEE Access. 4, 880–882 (2016)
Y. Dodis, L. Reyzin, A. Smith, Fuzzy extractors: how to generate strong keys from biometrics and other noisy data, in Advance Cryptology-Eurocrypt 2004 (Springer, Berlin, 2004)
Q. Li, M. Guo, E.-C. Chang, Fuzzy extractors for asymmetric biometric representations, in IEEE Computer Society Conference on Computer Vision and Pattern Recognition Workshops, 2008. CVPRW’08, pp. 1–6 (2008)
X. Wu, N. Qi, K. Wang, D. Zhang, An iris cryptosystem for information security, in Proceedings of 2008 4th International Conference on Intelligence Information Hiding Multimedia, Signal Process. IIH-MSP 2008, pp. 1533–1536 (2008)
A. Czajka, A. Pacut, Replay attack prevention for iris biometrics, in 2008 42nd Annual IEEE International Carnahan Conference on Security Technology (IEEE, New York, 2008), pp. 247––253
J. Hämmerle-Uhl, K. Raab, A. Uhl, Robust watermarking in iris recognition: application scenarios and impact on recognition performance. ACM SIGAPP Appl. Comput. Rev. 11, 6–18 (2011)
J. Shelton, K. Roy, B. O’Connor, G.V. Dozier, Mitigating iris-based replay attacks. Int. J. Mach. Learn. Comput. 4, 204–209 (2014)
R. Gupta, P. Sehgal, mitigating iris based replay attack using cuckoo optimized reversible watermarking, in Seventh International Conference on Advances in Computing, Control, and Telecommunication Technologies - ACT 2016 (2016)
D.F. Smith, A. Wiliem, B.C. Lovell, Face recognition on consumer devices: reflections on replay attack. IEEE Trans. Inf. Forensics Secur. 10, 736–745 (2015)
G.I. Davida, Y. Frankel, B.J. Matt, On enabling secure applications through off-line biometric identification, in 1998 IEEE Symposium on Security and Privacy, 1998. Proceedings, pp. 148–157 (1998)
X. Wu, N. Qi, K. Wang, D. Zhang, A novel cryptosystem based on iris key generation, in Proceedings of 4th International Conference on Natural Computation, ICNC 2008, vol. 4, pp. 53–56 (2008)
C. Rathgeb, A. Uhl, Context based biometric key generation for iris. IET Comput. Vis. 5, 389–397 (2011)
L. Ma, T. Tan, Y. Wang, D. Zhang, Efficient iris recognition by characterizing key local variations. IEEE Trans. Image Process. 13, 739–750 (2004)
L. Masek, Recognition of human iris patterns for biometric identification (Doctoral dissertation, Master’s thesis, University of Western Australia) (2003)
M.-A. Velciu, A. Pătrascu, V.-V. Patriciu, An evaluation of the Reed-Solomon error-correcting codes usage for bio-cryptographic algorithms, in 2015 IEEE 10th Jubilee International Symposium on Applied Computational Intelligence and Informatics (SACI), pp. 37–41 (2015)
H. Elsaid, A.E. Ahmed, Design and implementation of Reed-Solomon decoder using decomposed inversion less Berlekamp-Massey algorithm (2010)
https://www.cs.cmu.edu/~guyb/realworld/reedsolomon/reed_solomon_codes.html
G. Sutra, B. Dorizzi, S. Garcia-Salicetti, N. Othman, A biometric reference system for iris, OSIRIS version 4.1. Telecom Sud Paris, Fr. Technical Report (2012)
CASIA-Iris version 3 interval database [Online]. http://biometrics.idealtest.org/dbDetailForUser.do?id=3
X. Wu, N. Qi, K. Wang, D. Zhang, An iris cryptosystem for information security, in Proceedings of 2008 4th International Conference on Intelligence Information Hiding Multimedia. Signal Process. IIH-MSP’08 (IEEE, New York, 2008), pp. 1533–1536
F. Monrose, M.K. Reiter, Q. Li, S. Wetzel, Cryptographic key generation from voice, in 2001 IEEE Symposium on Security and Privacy, 2001. S&P 2001. Proceedings, pp. 202–213 (2001)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2019 Springer Nature Singapore Pte Ltd.
About this paper
Cite this paper
Gupta, R., Sehgal, P. (2019). A Complete End-to-End System for Iris Recognition to Mitigate Replay and Template Attack. In: Wang, J., Reddy, G., Prasad, V., Reddy, V. (eds) Soft Computing and Signal Processing . Advances in Intelligent Systems and Computing, vol 900. Springer, Singapore. https://doi.org/10.1007/978-981-13-3600-3_54
Download citation
DOI: https://doi.org/10.1007/978-981-13-3600-3_54
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-13-3599-0
Online ISBN: 978-981-13-3600-3
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)