Efficient biometric verification in the encrypted domain

Abstract. Biometric authentication over public networks leads to a variety of privacy issues that needs to be addressed before it can become popular. The pri-mary concerns are that the biometrics might reveal more information than the identity itself, as well as provide the ability to track users over an extended pe-riod of time. In this paper, we propose an authentication protocol that alleviates these concerns. The protocol takes care of user privacy, template protection and trust issues in biometric authentication systems. The protocol uses asymmetric encryption, and captures the advantages of biometric authentication. The protocol provides non-repudiable identity verification, while not revealing any additional information about the user to the server or vice versa. We show that the proto-col is secure under various attacks. Experimental results indicate that the overall method is efficient to be used in practical scenarios.