Security Capacity of the Fuzzy Fingerprint Vault
The authors investigate the security of a privacy enhancing technique for fingerprint authentication known as fuzzy fingerprint vault. This technique is based on the fuzzy vault of Jules and Sudan, a scheme that allows error tolerant authentication, while preserving the privacy of the reference data. They explore if and under what circumstances a secure fuzzy fingerprint vault can be implemented. They derive both upper and lower security bounds for any attacks that attempt to recover the template from the stored reference data, and, at the same time, significantly improve the best known attack. Furthermore, they show how to select optimal parameters and evaluate both minimum minutiae match rates and minimum number of minutiae needed to obtain an appropriate security level.