Robust, short and sensitive authentication tags using secure sketch

ABSTRACT

In order to apply cryptographic operations on noisy data, a recent approach employs some additional public data, known as secure sketch, to correct the noise so that consistent outcome can be obtained. This approach can be employed to extract authentication tags from noisy multimedia or biometric objects, by including the sketch in the tags. However, there are a few issues that need to be addressed. Firstly, those objects are typically represented in a continuous domain, and hence further quantization is required in order to obtain a short authentication tag. Secondly, for the purpose of authentication, forgery and preimage attacks are major concerns. However, such attacks are not considered in the notion of secure sketch. To handle the first issue, we give a construction using two levels of quantization. The second issue leads to the proposed additional requirement on sensitivity. We study how to choose the optimal parameters under the trade-off of robustness, size and sensitivity, and show that in many practical settings, the two-level quantization can be significantly more effective than a seemingly natural method of assigning one bit to each coefficient.

REFERENCES

• 1: Ee-Chien Chang and Qiming Li. Hiding secret points amidst chaff. In EUROCRYPT, volume 4004 of LNCS, pages 59--72, St. Petersburg, Russia, May 2006.
• 2: B. Chen and G.W. Wornell. Quantization Index Modulation methods: A class of provably good methods for digital watermarking and information embedding. IEEE Trans. on Information Theory, 49(4):1423--1443, 2001.
• 3: T. Charles Clancy , Negar Kiyavash , Dennis J. Lin, Secure smartcardbased fingerprint authentication, Proceedings of the 2003 ACM SIGMM workshop on Biometrics methods and applications, November 08, 2003, Berkley, California [doi>10.1145/982507.982516]
• 4: G. Di Crescenzo, R. Graveman, G. Arce, and R. Ge. A formal security analysis of approximate message authentication codes. In CTA Communications and Networks, pages 217--221, College Park, MD, April 2003.
• 5: Y. Dodis, L. Reyzin, and A. Smith. Fuzzy extractors: How to generate strong keys from biometrics and other noisy data. In Eurocypt, volume 3027 of LNCS, pages 125--132, Interlaken, Switzerland, May 2004.
• 6: A. Goh and D.C.L. Ngo. Computation of cryptographic keys from face biometrics. In IFIP Communications and Multimedia Security, volume 2828 of LNCS, pages 1{13, Torino, Italy, October 2003.
• 7: R. Graveman and K. Fu. Approximate message authentication codes. In 3rd Annual Fedlab Symposium of Advanced Telecommunication/Inforamtion Distribution, volume 1, College Park, MD, February 1999.
• 8: F. Hao and C.W. Chan. Private key generation from on-line handwritten signatures. Information Management and Computer Security, 10(4):159--164, 2002.
• 9: Feng Hao, Ross Anderson, and John Daugman. Combining cryptography with biometrics effectively. Technical Report UCAM-CL-TR-640, University of Cambridge, 2005.
• 10: A. Juels and M. Sudan. A fuzzy vault scheme. IEEE International Symposium on Information Theory, page 408, June 2002.
• 11: Ari Juels , Martin Wattenberg, A fuzzy commitment scheme, Proceedings of the 6th ACM conference on Computer and communications security, p.28-36, November 01-04, 1999, Kent Ridge Digital Labs, Singapore [doi>10.1145/319709.319714]
• 12: J. P. Linnartz and P. Tuyls. New shielding functions to enhance privacy and prevent misuse of biometric templates. In 4th International Conference on Audio and Video Based Biometric Person Authentication, volume 2688 of LNCS, pages 125--132, June 2003.
• 13: Fabian Monrose , Michael K. Reiter , Qi Li , Susanne Wetzel, Cryptographic Key Generation from Voice, Proceedings of the 2001 IEEE Symposium on Security and Privacy, p.202, May 14-16, 2001
• 14: Yagiz Sutcu , Husrev Taha Sencar , Nasir Memon, A secure biometric authentication scheme based on robust hashing, Proceedings of the 7th workshop on Multimedia and security, August 01-02, 2005, New York, NY, USA [doi>10.1145/1073170.1073191]
• 15: P. Tuyls and J. Goseling. Capacity and examples of template-protecting biometric authentication systems. In Biometric Authentication Workshop, pages 158--170, Prague, May 2004.
• 16: L. Xie, G.R. Arce, and R.F. Graveman. Approximate image message authentication codes. IEEE Trans. on Multimedia, 3 2):242--252, 2001.
• 17: Shenglin Yang and Ingrid Verbauwhede. Automatic secure fingerprint verification system based on fuzzy vault scheme. In IEEE International Conference on Acoustics, Speech, and Signal Processing (ICASSP), pages 609--612, March 2005.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Authentication

General Terms:
Security

Keywords:
authentication, robustness, secure sketch, sensitivity, two-level quantization