FLAME: Flexible and Lightweight Biometric Authentication Scheme in Malicious Environments

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Wang, Fuyi, Sun, Fangyuan, Fan, Mingyuan, Zhou, Jianying, Ma, Jin, Chen, Chao, Shu, Jiangang, Zhang, Leo Yu
Natura: Preprint
Pubblicazione: 2025
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866915595176378368
author Wang, Fuyi
Sun, Fangyuan
Fan, Mingyuan
Zhou, Jianying
Ma, Jin
Chen, Chao
Shu, Jiangang
Zhang, Leo Yu
author_facet Wang, Fuyi
Sun, Fangyuan
Fan, Mingyuan
Zhou, Jianying
Ma, Jin
Chen, Chao
Shu, Jiangang
Zhang, Leo Yu
contents Privacy-preserving biometric authentication (PPBA) enables client authentication without revealing sensitive biometric data, addressing privacy and security concerns. Many studies have proposed efficient cryptographic solutions to this problem based on secure multi-party computation, typically assuming a semi-honest adversary model, where all parties follow the protocol but may try to learn additional information. However, this assumption often falls short in real-world scenarios, where adversaries may behave maliciously and actively deviate from the protocol. In this paper, we propose, implement, and evaluate $\sysname$, a \underline{F}lexible and \underline{L}ightweight biometric \underline{A}uthentication scheme designed for a \underline{M}alicious \underline{E}nvironment. By hybridizing lightweight secret-sharing-family primitives within two-party computation, $\sysname$ carefully designs a line of supporting protocols that incorporate integrity checks with rationally extra overhead. Additionally, $\sysname$ enables server-side authentication with various similarity metrics through a cross-metric-compatible design, enhancing flexibility and robustness without requiring any changes to the server-side process. A rigorous theoretical analysis validates the correctness, security, and efficiency of $\sysname$. Extensive experiments highlight $\sysname$'s superior efficiency, with a communication reduction by {$97.61\times \sim 110.13\times$} and a speedup of {$ 2.72\times \sim 2.82\times$ (resp. $ 6.58\times \sim 8.51\times$)} in a LAN (resp. WAN) environment, when compared to the state-of-the-art work.
format Preprint
id arxiv_https___arxiv_org_abs_2511_02176
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle FLAME: Flexible and Lightweight Biometric Authentication Scheme in Malicious Environments
Wang, Fuyi
Sun, Fangyuan
Fan, Mingyuan
Zhou, Jianying
Ma, Jin
Chen, Chao
Shu, Jiangang
Zhang, Leo Yu
Cryptography and Security
Privacy-preserving biometric authentication (PPBA) enables client authentication without revealing sensitive biometric data, addressing privacy and security concerns. Many studies have proposed efficient cryptographic solutions to this problem based on secure multi-party computation, typically assuming a semi-honest adversary model, where all parties follow the protocol but may try to learn additional information. However, this assumption often falls short in real-world scenarios, where adversaries may behave maliciously and actively deviate from the protocol. In this paper, we propose, implement, and evaluate $\sysname$, a \underline{F}lexible and \underline{L}ightweight biometric \underline{A}uthentication scheme designed for a \underline{M}alicious \underline{E}nvironment. By hybridizing lightweight secret-sharing-family primitives within two-party computation, $\sysname$ carefully designs a line of supporting protocols that incorporate integrity checks with rationally extra overhead. Additionally, $\sysname$ enables server-side authentication with various similarity metrics through a cross-metric-compatible design, enhancing flexibility and robustness without requiring any changes to the server-side process. A rigorous theoretical analysis validates the correctness, security, and efficiency of $\sysname$. Extensive experiments highlight $\sysname$'s superior efficiency, with a communication reduction by {$97.61\times \sim 110.13\times$} and a speedup of {$ 2.72\times \sim 2.82\times$ (resp. $ 6.58\times \sim 8.51\times$)} in a LAN (resp. WAN) environment, when compared to the state-of-the-art work.
title FLAME: Flexible and Lightweight Biometric Authentication Scheme in Malicious Environments
topic Cryptography and Security
url https://arxiv.org/abs/2511.02176