Biometrics gain increasing interest as a solution for many security issues, but privacy risks exist in case we do not protect the stored templates well. This paper presents a new verification scheme, which protects the secrets of the enrolled users. We will show that zero leakage is achieved if certain criteria are met and we benchmark the performance of this scheme. We quantify performance loss in terms of detection and false acceptance rate and capacity of the biometric channel, which are slightly worse than those of the current leaky methods.
Joep A. de Groot, Jean-Paul M. G. Linnartz