Blended substitution attack independent;fuzzy vault for fingerprint template security
S M Sarala, Maya V Karki, Divakar Yadav · 2016
The main concern associated with biometric structures which are stored in a database is the security of the template storage system. A new technique which assembles the encryption key and biometric sample using a cryptographic means is the fuzzy vault. The fuzzy vault scheme provides supreme security to the templates which are stored in a database or smart card. Compared to an ordinary system which stores the templates as such without any protection, the protection enabled by this fuzzy vault system is tremendous. It is almost impossible for an attacker to guess any information out of the fuzzy vault regarding fingerprint templates. But still some kind of attacks such as correlation attack, Attacks via record multiplicity and Blended substitution attack can be launched on the fuzzy vault, which is stored in a database. Among them Blended substitution attack is the major one, which is still unresolved. Hence in this paper the Blended substitution attack is launched by corrupting the fuzzy vault data with a random data and the attack is determined using the statistical features of the fuzzy vault data and the fuzzy vault is self recovered back after the attack without any user's re-enrollment again, by storing the genuine points of the vault which corresponds to fingerprint features set in a server, which is assumed to be connected with the vault database continuously.