Secure fuzzy fingerprint vault against correlation attack

Abstract

The fuzzy vault scheme has emerged as a promising solution to the user privacy and the fingerprint template security problems. Recently, however, this scheme is shown to be susceptible to a correlation attack that finds the real minutiae using multiple vaults enrolled for different applications. To protect the fuzzy fingerprint vault from the correlation attack, we propose an approach to add chaffs in a more structured way such that distinguishing the fingerprint minutiae and the chaff points obtained from two applications is computationally hard. Experimental results show that the proposed approach achieves much secure performance than adding chaffs randomly without a significant degradation of the verification accuracy.