2017/02/27 by Julien Bringer, Hervé Chabanne, Bringer, Julien +5
Computer Science · Social Sciences · #Biometric Identification and Security #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Logic in Computer Science (cs.LO) #Privacy, Security, and Data Protection #Privacy-Preserving Technologies in Data #User Authentication and Security Systems
paper · pdf · doi:10.48550/arxiv.1702.08301
openalex publication_date 2017/02/27 · openalex created_date 2022/08/29 · openalex updated_date 2026/07/28
This work aims to show the applicability, and how, of privacy by design\napproach to biometric systems and the benefit of using formal methods to this\nend. Starting from a general framework that has been introduced at STM in 2014,\nthat enables to define privacy architectures and to formally reason about their\nproperties, we explain how it can be adapted to biometrics. The choice of\nparticular techniques and the role of the components (central server, secure\nmodule, biometric terminal, smart card, etc.) in the architecture have a strong\nimpact on the privacy guarantees provided by a biometric system. In the\nliterature, some architectures have already been analysed in some way. However,\nthe existing proposals were made on a case by case basis, which makes it\ndifficult to compare them and to provide a rationale for the choice of specific\noptions. In this paper, we describe, on different architectures with various\nlevels of protection, how a general framework for the definition of privacy\narchitectures can be used to specify the design options of a biometric systems\nand to reason about them in a formal way.\n