Effectiveness of Fully Homomorphic Encryption to Preserve the Privacy of Biometric Data

One of the most reliable methods of authentication used today is biometric matching. This authentication process, which is done by using biometrics information such as fingerprint, iris, face, etc. is used in many application areas. Authentication at border gates is one of these areas. However, some restrictions have been introduced to storing and using such data, especially with the General Data Protection Regulation (GDPR). The main goal of this work is to find the practical implementation of fully homomorphic encryption-based biometric matching in border controls. In this paper, we propose a biometric authentication system based on hash expansion and fully homomorphic encryption features, considering these restrictions. One of the most significant drawbacks of the homomorphic encryption method is the long execution time. We solved this problem by executing the matching algorithm in parallel manner. The proposed scheme is implemented as proof-of-concept in the SMILE, and its advantages in privacy preservation has been demonstrated.

Download Full-text

An improved Framework for Biometric Database’s privacy

International Journal of Communication Networks and Information Security (IJCNIS) ◽

10.54039/ijcnis.v13i3.5143 ◽

2021 ◽

Vol 13 (3) ◽

Author(s):

Ahmed EL-YAHYAOUI ◽

Fouzia OMARY

Keyword(s):

Homomorphic Encryption ◽

Security And Privacy ◽

Fully Homomorphic Encryption ◽

Sensitive Data ◽

Biometric Data ◽

Java Programming ◽

Biometric Systems ◽

Database Privacy ◽

Security Module ◽

New Framework

Security and privacy are huge challenges in biometric systems. Biometrics are sensitive data that should be protected from any attacker and especially attackers targeting the confidentiality and integrity of biometric data. In this paper an extensive review of different physiological biometric techniques is provided. A comparative analysis of the various sus mentioned biometrics, including characteristics and properties is conducted. Qualitative and quantitative evaluation of the most relevant physiological biometrics is achieved. Furthermore, we propose a new framework for biometric database privacy. Our approach is based on the use of the promising fully homomorphic encryption technology. As a proof of concept, we establish an initial implementation of our security module using JAVA programming language.

Download Full-text

A Neural Network Application of Fully Homomorphic Encryption for Cloud Computing

SSRN Electronic Journal ◽

10.2139/ssrn.3565268 ◽

2020 ◽

Author(s):

Megha Kolhekar ◽

Ashish Pandey ◽

Ayushi Raina ◽

Rijin Thomas ◽

Vaibhav Tiwari ◽

...

Keyword(s):

Neural Network ◽

Cloud Computing ◽

Homomorphic Encryption ◽

Fully Homomorphic Encryption ◽

Network Application

Download Full-text

A fully homomorphic encryption based on magic number fragmentation and El‐Gamal encryption: Smart healthcare use case

Expert Systems ◽

10.1111/exsy.12767 ◽

2021 ◽

Author(s):

Mostefa Kara ◽

Abdelkader Laouid ◽

Mohammed Amine Yagoub ◽

Reinhardt Euler ◽

Saci Medileh ◽

...

Keyword(s):

Homomorphic Encryption ◽

Magic Number ◽

Use Case ◽

Healthcare Use ◽

Fully Homomorphic Encryption ◽

Smart Healthcare

Download Full-text

A Password Meter without Password Exposure

Sensors ◽

10.3390/s21020345 ◽

2021 ◽

Vol 21 (2) ◽

pp. 345

Author(s):

Pyung Kim ◽

Younho Lee ◽

Youn-Sik Hong ◽

Taekyoung Kwon

Keyword(s):

Performance Enhancement ◽

Homomorphic Encryption ◽

Optimization Techniques ◽

Third Party ◽

Fully Homomorphic Encryption ◽

Performance Achievement ◽

Server Side ◽

On Line ◽

Internal Mechanism ◽

High Chance

To meet password selection criteria of a server, a user occasionally needs to provide multiple choices of password candidates to an on-line password meter, but such user-chosen candidates tend to be derived from the user’s previous passwords—the meter may have a high chance to acquire information about a user’s passwords employed for various purposes. A third party password metering service may worsen this threat. In this paper, we first explore a new on-line password meter concept that does not necessitate the exposure of user’s passwords for evaluating user-chosen password candidates in the server side. Our basic idea is straightforward; to adapt fully homomorphic encryption (FHE) schemes to build such a system but its performance achievement is greatly challenging. Optimization techniques are necessary for performance achievement in practice. We employ various performance enhancement techniques and implement the NIST (National Institute of Standards and Technology) metering method as seminal work in this field. Our experiment results demonstrate that the running time of the proposed meter is around 60 s in a conventional desktop server, expecting better performance in high-end hardware, with an FHE scheme in HElib library where parameters support at least 80-bit security. We believe the proposed method can be further explored and used for a password metering in case that password secrecy is very important—the user’s password candidates should not be exposed to the meter and also an internal mechanism of password metering should not be disclosed to users and any other third parties.

Download Full-text