Reverse-engineer methods on a biometric hash algorithm for dynamic handwriting

  • Authors:
  • Karl Kümmel;Claus Vielhauer

  • Affiliations:
  • University of Applied Sciences Brandenburg, Brandenburg an der Havel, Germany;University of Applied Sciences Brandenburg, Brandenburg an der Havel, Germany

  • Venue:
  • Proceedings of the 12th ACM workshop on Multimedia and security
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Biometric Hash algorithms, also called BioHash, are commonly designed to ensure template protection to its biometric raw data. They provide a certain level of robustness against input variability to assure reproducibility by compensating for intra-class variation of the biometric raw data. This concept can be a potential vulnerability. In this paper, we present two different approaches which exploit this vulnerability to reconstruct raw data out of a given BioHash for handwriting introduced in [1]. The first method uses manual user interaction combined with a genetic algorithm and the second approach uses a spline interpolation function based on specific features to generate raw data. Although they are hard to compare due to the different design, we do compare them with respect to their ability to reconstruct raw data within specific scenarios (constrained and unconstrained time and trails), time consumption during the reconstruction and usability. To show the differences, we evaluate using 250 raw data sets (10 individuals overall) consisting of 5 different handwriting semantics. We generate 50 BioHash vectors out of the raw data and use these as reference data to generate artificial raw data by using both attack methods. These experimental results show that the interactive approach is able to reconstruct raw data more accurate, compared to the automatic method, but with a much higher reconstruction time. If several hundred raw data samples are generated by the automatic approach the chance rises that one of the samples achieve equal or even better results than the interactive approach.