Electrical Muscle Stimulation System for Automatic Reproduction of Secret Information Without Exposing Biometric Data

Takumi Takaiwa,Shinnosuke Nozaki,Kota Numada,Tsubasa Shibata,Sana Okumura,Soichi Takigawa,Tetsushi Ohki,Masakatsu Nishigaki
HCI for Cybersecurity, Privacy and Trust: 6th International Conference, HCI-CPT 2024, Held as Part of the 26th HCI International Conference,HCII 2024,Washington,DC,USA,June 29–July 4,2024,Proceedings,Part II,June 2024,Pages 234-249
[ Paper ]

Abstract

Biometric data is personal information, which leads to the psychological resistance of the user. Using biometric-based FIDO authentication eliminates the risk of biometric data leakage outside the local device. However, the risk of biometric data leakage remains because presenting biometric data to the device is necessary at the time of authentication. As a solution to this problem, we propose Human Parameterized Locality Sensitive Hash (HPLSH), which enables user authentication without revealing biometric data by using biometric data not as data but as a “medium for transforming data.” This concept aims to generate authentication information by transforming a seed through the human body so that the user can be identified without revealing biometric data. As a concrete design of HPLSH, we used the keyboard and the user’s response to EMS. The user wears an EMS-generating device on the forearm, and when electrical stimulation is administered to the forearm from the EMS-generating device, the user’s fingers involuntarily move to interact with the keyboard and generate authentication information. In this paper, we discuss the concept of HPLSH and its implementation. We examine the feasibility of the proposed method through a preliminary user experiment.

Updated: