Search papers, labs, and topics across Lattice.
This paper introduces Multiple Permuted-Label Classifier Encoding (MPLCE), a novel approach for biometric template protection that enhances security by employing classifier-specific label permutations to generate randomized intermediate templates. By preventing repeated encodings of identity labels and using cryptographic hashing, MPLCE effectively mitigates risks associated with helper data and maintains classification consistency across modalities. Experimental results demonstrate MPLCE's competitive performance, achieving high genuine acceptance rates on multiple biometric datasets while ensuring security features like irreversibility and unlinkability.
MPLCE achieves a remarkable 98.61% genuine acceptance rate while eliminating the risks of helper data and maintaining classification consistency across different biometric modalities.
Biometric template protection (BTP) must secure stored templates while tolerating intra-class variations. Existing methods rely on protected-domain similarity matching, error correction, or predefined-template mappings, potentially retaining exploitable similarity structures, introducing helper-data risks, depending on artificial targets, or coupling protection to specific modalities. Storing only cryptographic hash digests eliminates directly comparable representations and conceals pre-hash templates, but hash-based exact-match verification requires genuine samples to generate identical intermediate templates before hashing. Identity classification is naturally suited to this requirement because it maps variable biometric samples to stable and discriminative identity-level outputs. Based on this insight, we propose Multiple Permuted-Label Classifier Encoding (MPLCE). Through classifier-specific label permutations, MPLCE assigns each identity different labels across multiple classifiers. The predicted labels are encoded and concatenated to form an intermediate template, preventing repeated encodings of a single identity label and enlarging the effective candidate space while preserving classification consistency. The template is randomized with an application-specific XOR string and cryptographically hashed, enabling exact-match verification without error correction codes or biometric-dependent helper data. Using modality-specific classifiers, MPLCE retains the same template generation and protection procedure across modalities. On four face and two iris datasets, MPLCE achieves competitive performance, including a GAR of 98.61\% at a FAR of 5.51\(\times\)10\textsuperscript{-5}\% on YTF and a GAR of 99.10\% at a FAR of 0.00\% on CASIA-Iris-Lamp. Security analyses and attack evaluations support its irreversibility, revocability, and unlinkability under the threat model.
