Preimage Attack on BioHashing

• Main Authors: Lacharme, Patrick, Cherrier, Estelle, Rosenberger, Christophe
• Other Authors: Equipe SAFE - Laboratoire GREYC - UMR6072, Groupe de Recherche en Informatique, Image et Instrumentation de Caen (GREYC), Centre National de la Recherche Scientifique (CNRS)-École Nationale Supérieure d'Ingénieurs de Caen (ENSICAEN), Normandie Université (NU)-Normandie Université (NU)-Université de Caen Normandie (UNICAEN), Normandie Université (NU)-Centre National de la Recherche Scientifique (CNRS)-École Nationale Supérieure d'Ingénieurs de Caen (ENSICAEN), Normandie Université (NU)
• Format: Conference Object
• Language: English
• Published: HAL CCSD 2013
• Subjects: [INFO.INFO-CR]Computer Science [cs]/Cryptography and Security [cs.CR]; Iceland
• Online Access: https://hal.archives-ouvertes.fr/hal-01015274; https://hal.archives-ouvertes.fr/hal-01015274/document; https://hal.archives-ouvertes.fr/hal-01015274/file/secrypt_2013.pdf

International audience Biometric recognition is more and more employed in authentication and access control of various applications. Biometric data are strongly linked with the user and do not allow revocability nor diversity, without an adapted post-processing. Cancelable biometrics, including the very popular algorithm BioHashing, is used to cope with the underlying privacy and security issues. The principle is to transform a biometric template in a BioCode, in order to enhance user privacy and application security. These schemes are used for template protection of several biometric modalities, as fingerprints or face and the robustness is generally related to the hardness to recover the original biometric template by an impostor. In this paper, we propose to use genetic algorithms to approximate the original biometric feature and spoof the authentication system. We show through experimental results on fingerprints the efficiency of the proposed attack on the BioHashing algorithm, by approximating the original FingerCode, given the seed and the corresponding BioCode.