Reusable fuzzy extractor based on the learning-with-error assumption secure against quantum attacks

1. A system for biometric based security, the system comprising:

a scanner configured to provide biometric data; and

one or more processors and a non-transitory computer-readable medium having executable instructions encoded thereon such that when executed, the one or more processors perform an operation of:

converting biometric data into a cryptographic key for accessing a secured data using a reusable fuzzy extractor process,

wherein the reusable fuzzy extractor process comprises a generation process and a reconstruction process, wherein the generation process takes as input a public parameter and a first biometric input related to the biometric data and outputs a public helper string and a first random string, and wherein the reconstruction process takes as input the public helper string and a second biometric input related to the biometric data and outputs a second random string,

wherein reusability of the reusable fuzzy extractor process guarantees that multiple public helper strings can be generated using multiple biometric inputs related to the biometric data without revealing any biometric data.

2. The system as set forth in claim 1 , wherein the reusable fuzzy extractor process is secure against quantum adversaries only under a learning-with-error (LWE) assumption.

3. The system as set forth in claim 1 , wherein when the first random string is considered equivalent to the second random string, the one or more processors further perform an operation of verifying access to the secured data using the second random string.

4. The system as set forth in claim 1 , wherein security of the reusable fuzzy extractor process is guaranteed based on a computational hardness assumption of a learning-with-error (LWE) problem.

5. The system as set forth in claim 1 , wherein the biometric data is a fingerprint and the secured data is accessed through a server.

6. The system as set forth in claim 1 , wherein the one or more processors further perform operations of:

performing the generation process for obtaining the public helper string and the first random string;

encrypting a message using the first random string as a cryptographic key for a symmetric encryption scheme, resulting in a ciphertext; and

storing the public helper string.

7. A system for biometric based security, the system comprising:

one or more processors and a non-transitory computer-readable medium having executable instructions encoded thereon such that when executed, the one or more processors perform an operation of:

receiving biometric data from a scanner;

obtaining a ciphertext with an associated first random string and encrypted message;

authenticating the biometric data by performing a reconstruction process which takes as input a public helper string and the biometric data and outputs a second random string;

determining whether the second random string is equivalent to the first random string;

decrypting the ciphertext using the second random string; and

obtaining the message for authentication of the biometric data.

8. A computer implemented method for biometric based security, the method comprising an act of:

causing one or more processors to execute instructions encoded on a non-transitory computer-readable medium, such that upon execution, the one or more processors perform operations of:

receiving biometric data from a scanner; and

converting the biometric data into a cryptographic key for accessing a secured data using a reusable fuzzy extractor process,

wherein the reusable fuzzy extractor process comprises a generation process and a reconstruction process, wherein the generation process takes as input a public parameter and a first biometric input related to the biometric data and outputs a public helper string and a first random string, and wherein the reconstruction process takes as input the public helper string and a second biometric input related to the biometric data and outputs a second random string,

wherein reusability of the reusable fuzzy extractor process guarantees that multiple public helper strings can be generated using multiple biometric inputs related to the biometric data without revealing any biometric data.

9. The method as set forth in claim 8 , wherein the reusable fuzzy extractor process is secure against quantum adversaries only under a learning-with-error (LWE) assumption.

10. The method as set forth in claim 8 , wherein when the first random string is considered equivalent to the second random string, the one or more processors performs an operation of verifying access to the secured data using the second random string.

11. The method as set forth in claim 8 , wherein security of the reusable fuzzy extractor process is guaranteed based on a computational hardness assumption of a learning-with-error (LWE) problem.

12. The method as set forth in claim 8 , wherein the biometric data is a fingerprint and the secured data is accessed through a server.

13. The method as set forth in claim 8 , wherein the one or more processors further perform operations of:

performing the generation process for obtaining the public helper string and the first random string;

encrypting a message using the first random string as a cryptographic key for a symmetric encryption scheme, resulting in a ciphertext; and

storing the public helper string.

14. A computer-implemented method for biometric based security, the method comprising an act of:

causing one or more processors to execute instructions encoded on a non-transitory computer-readable medium, such that upon execution, the one or more processors perform operations of:

receiving biometric data from a scanner;

obtaining a ciphertext with an associated first random string and encrypted message;

authenticating the biometric data by performing a reconstruction process which takes as input a public helper string and the biometric data and outputs a second random string;

determining whether the second random string is equivalent to the first random string;

decrypting the ciphertext using the second random string; and

obtaining the message for authentication of the biometric data.

15. A computer program product for biometric based security, the computer program product comprising:

computer-readable instructions stored on a non-transitory computer-readable medium that are executable by a computer having one or more processors for causing the processor to perform operations of:

converting biometric data into a cryptographic key for accessing a secured data using a reusable fuzzy extractor process,

wherein the reusable fuzzy extractor process comprises a generation process and a reconstruction process, wherein the generation process takes as input a public parameter and a first biometric input related to the biometric data and outputs a public helper string and a first random string, and wherein the reconstruction process takes as input the public helper string and a second biometric input related to the biometric data and outputs a second random string,

wherein reusability of the reusable fuzzy extractor process guarantees that multiple public helper strings can be generated using multiple biometric inputs related to the biometric data without revealing any biometric data.

16. The computer program product as set forth in claim 15 , wherein the reusable fuzzy extractor process is secure against quantum adversaries only under a learning-with-error (LWE) assumption.

17. The computer program product as set forth in claim 15 , wherein when the first random string is considered equivalent to the second random string, the one or more processors performs an operation of verifying access to the secured data using the second random string.

18. The computer program product as set forth in claim 15 , wherein security of the reusable fuzzy extractor process is guaranteed based on a computational hardness assumption of a learning-with-error (LWE) problem.

19. The computer program product as set forth in claim 15 , wherein the biometric data is a fingerprint and the secured data is accessed through a server.

20. The computer program product as set forth in claim 15 , further comprising instructions for causing the one or more processors to further perform operations of:

performing the generation process for obtaining the public helper string and the first random string;

encrypting a message using the first random string as a cryptographic key for a symmetric encryption scheme, resulting in a ciphertext; and

storing the public helper string.

21. The system as set forth in claim 1 , wherein the scanner is a fingerprint scanner.

22. The system as set forth in claim 1 , wherein the scanner is an eye scanner.