New biometric cryptosystem to protect sensitive data in Internet of objects

摘要

Ensuring protection of sensitive data in embedded devices widespread and operanting in adversary environment is a major issue. Among lot of instance of this problem, IoT is the well-know case study. In addition, very often for cost reason, the devices used in Internet of Things (IoT) do not integrate secure components (cryptoprocessor, encrypted memory, etc) like smart card. To solve this issue, this paper presents two contributions to fuzzy vault-biometric cryptosystems which can enable IoT devices supporting biometry to secure sensitive data they embed in their memory when they operate in an adverse environment. If an adversary captures a device and read content of this regular memory, it will be very difficult for him to recover the protected data using brute-force. The first advantage of the proposals is thus to enable IoT devices to still embed regular memory, to protect sensitive data, instead of an expensive native encrypted memory or to add a cryptoprocessor. The second advantage of the proposals is to enable to not require storing of helper data and thus improve security and also save memory. Obviously our proposals can also be used in already secure devices to enhance the security level. Experimental results performed using fingerprint modality show that the proposals have the potential to efficiently protect sensitive data despite the strong constrained of IoT devices.