Share Email Print

Proceedings Paper

On the security of biohashing
Author(s): Xuebing Zhou; Ton Kalker
Format Member Price Non-Member Price
PDF $17.00 $21.00

Paper Abstract

Biohashing algorithms map biometric features randomly onto binary strings with user-specific tokenized random numbers. In order to protect biometric data, these binary strings, the Biohashes, are not allowed to reveal much information about the original biometric features. In the paper we analyse two Biohashing algorithms using scalar randomization and random projection respectively. With scalar randomization, multiple bits can be extracted from a single element in a feature vector. The average information rate of Biohashes is about 0.72. However, Biohashes expose the statistic information about biometric feature, which can be used to estimate the original feature. Using random projection method, a feature vector in n dimensional space can be converted into binary strings with length of m (mn). Any feature vector can be converted into 2m different Biohashes. The random projection can roughly preserve Hamming distance between Biohashes. Moreover, the direction information about the original vector can be retrieved with Biohashes and the corresponding random vectors used in the projection. Although Biohashing can efficiently randomize biometric features, combining more Biohashes of the same user can leak essential information about the original feature.

Paper Details

Date Published: 27 January 2010
PDF: 8 pages
Proc. SPIE 7541, Media Forensics and Security II, 75410Q (27 January 2010);
Show Author Affiliations
Xuebing Zhou, Fraunhofer-Institut für Graphische Datenverarbeitung (Germany)
Ton Kalker, Hewlett-Packard Co. (United States)

Published in SPIE Proceedings Vol. 7541:
Media Forensics and Security II
Nasir D. Memon; Jana Dittmann; Adnan M. Alattar; Edward J. Delp III, Editor(s)

© SPIE. Terms of Use
Back to Top
Sign in to read the full article
Create a free SPIE account to get access to
premium articles and original research
Forgot your username?