Analysis of Biometric Authentication Protocols in the Blackbox Model

TL;DR

This paper introduces a comprehensive framework for analyzing biometric authentication protocols under blackbox assumptions and demonstrates actual attacks on several recent schemes, highlighting security vulnerabilities.

Contribution

It presents a new blackbox analysis framework and exposes security flaws in recent biometric authentication schemes.

Findings

Identified vulnerabilities in schemes from ACISP 2007, 2008, and SPIE 2010.

Demonstrated practical attacks exploiting blackbox component behaviors.

Provided a unified approach for analyzing biometric protocols under internal adversaries.

Abstract

In this paper we analyze different biometric authentication protocols considering an internal adversary. Our contribution takes place at two levels. On the one hand, we introduce a new comprehensive framework that encompasses the various schemes we want to look at. On the other hand, we exhibit actual attacks on recent schemes such as those introduced at ACISP 2007, ACISP 2008, and SPIE 2010, and some others. We follow a blackbox approach in which we consider components that perform operations on the biometric data they contain and where only the input/output behavior of these components is analyzed.