Practical Multi-Factor Biometric Remote Authentication
In this paper, the authors evaluate the security properties of Multi-Factor Biometric Authentication (MFBA) and define the notion of User Privacy, where the biometrics is assumed as a set of features that can be either ordered or unordered depending on the biometric modality. The authors propose efficient schemes for MFBA, which do not incorporate secure sketches, thus, different template extraction methods are applicable. They formally describe the security model for MFBA, where the computations are performed in the encrypted domain but without requiring a decryption key for the authentication decision. Thus, leakage of the secret key of any system component does not affect the security of the scheme as opposed to the current biometric systems involving cryptographic techniques.