A lightweight privacy-preserving fingerprint authentication system for IoT devices via pruned and secured minutia cylinder code

Fingerprint authentication is extensively adopted due to its ease of capture, low cost sensors and high recognition accuracy. The Minutia Cylinder Code (MCC) is a high-quality feature representation widely used in fingerprint authentication. However, there are two main limitations in the direct use of MCC: redundancy in the feature representation due to overlap between minutiae vicinities, which can lead to inefficient resource utilization; and vulnerability to template inversion attacks, which may expose the original fingerprint data and threaten user privacy. In this paper, we propose a lightweight privacy-preserving fingerprint authentication system that overcomes these limitations through two novel algorithms. The first algorithm, P-MCC, uses the Pearson correlation coefficient to prune MCC features to effectively reduce redundancy and improve resource utilisation, yielding a lightweight design. The second algorithm, S-MCC, applies a secure Boolean function which transforms the pruned MCC features non-invertibly to ensure privacy, thus preventing the reconstruction of original fingerprint data. Together, P-MCC and S-MCC provide a lightweight privacy-preserving fingerprint authentication system, which is well suited to resource-constrained environments, such as the Internet of Things (IoT). Experimental results demonstrate the effectiveness of the proposed system and its practicality in IoT applications.