Privacy preserving fingerprint authentication at the cloud server for ehealth services

Abstract

Background: Restricting entry and access to highly sensitive systems like e-Health services is vital to protect the privacy and confidentiality of customers. User authentication is implemented predominantly done using Bio-metric schemes. But there is a challenge in securely storing the fingerprint templates. Since fingerprints are permanent, fingerprints getting stolen will be a serious issue. Objective: The objective of this paper is to design a scheme to carry out the fingerprint match at the cloud server that will not compromise the fingerprints. Methods: When users input their fingerprint, a unique key is generated and it is sent to the server for verification. Results: We evaluated our proposed scheme and ascertained that it generates unique Fingerprint Identification Number for different fingerprints and the false rejection rate of our proposed scheme is within acceptable limit. Conclusion: The proposed scheme overcomes the security threats to the stored fingerprints of users.