The Universidad de Sevilla (US) is one of the oldest universities in Europe, with more than five centuries of academic and research excellence. US’s research group that participates in LICORICE focuses its activities on the design, analysis and development of cybersecurity solutions rooted in hardware and people, using cryptography and biometrics. It belongs to the Instituto de Microelectrónica de Sevilla (IMSE-CNM). US’s work in LICORICE concerns crypto-biometric techniques with post-quantum cryptography for EUDI wallets with a high level of assurance.
Role in LICORICE
US’s research group is providing and evaluating quantum-resistant crypto-biometric solutions and user keys protection for EUDI wallets, working with hybrid wallets with mobile and remote components, employing hardware-enabled secure remote solutions enhanced with trusted computing capabilities.
According to the ISO/IEC 24745 standard, the crypto-biometric techniques developed in LICORICE will provide irreversibility, unlinkability and revocability. Thanks to that: (a) sensitive information about biometric data will not be leaked from protected biometric features (therefore, protected features can be communicated and stored on remote components meeting the requirements of using trusted execution environments and hardware security modules), (b) it will be possible to obtain different protected biometric features from the same biometric sample (so that the enrolment of a user in different systems will not be limited), and (c) an adversary will not be able to recover any sensitive information or know the owner by comparing the protected features. Consequently, the compromised protected features can be destroyed without affecting other enrolments. US’s contributions will also avoid the success of False Acceptance Rate (FAR) and similarity-based attacks. In addition, the recognition performance of the unprotected scheme will be preserved or even improved, the verification phase will be carried out in real time, and the size of the protected features will be minimised to reduce the storage and transfer operations. Since biometric data are particularly protected by the GDPR, algorithms of NIST post-quantum standardisation process will be employed to provide long-term security, following recommendations of SOG-IS Crypto Working Group “implementing measures that provide some assurance against quantum computer assisted cryptanalysis”.
CONTACT
lumi@us.es
marjona@us.es
LINK
https://www.us.es/
