Bias: A Novel Secure and Efficient Biometrics-Based Identity Authentication Scheme

Abstract

Currently, biometric-based identity authentication schemes are widely adopted in the field of online payments. Consequently, this has led to an increasing number of people becoming concerned about the privacy protection of their biometric data. Gunasinghe et al. presented PrivBioMTAuth, a solution for mobile phone biometrics-based authentication designed to protect users’ privacy. However, it requires considerable storage and communication overhead during the registration phase, which may impact its overall efficiency. Moreover, the user’s biometric image and the password must be revealed to the identity provider. In this work, we present novel secure and efficient biometrics-based identity authentication solution with fully succinct verification and significantly lower storage and communication overhead. Different from PrivBioMTAuth, we rely on the NIZK argument given in Groth’s work to reduce the proof size and simplify the verification complexity. In addition, we design a high-performance protocol for conducting large-scale verification of the user’s identities. We propose an optimized multi-exponentiation argument based on Bayer et al.’s work and utilize it to ensure that a semi-trusted service provider who seeks to access the users’ sensitive biometric information can faithfully execute the user’s identity registration protocol. The experiment shows that our scheme is efficient and has privacypreserving capabilities, and it can be applied in the resource-constrained devices.

Keywords: Biometrics, Authentication, security