Crypto-biometric system, however, has some issues.
Any biometric system needs to provide biometric template
protection which confirms the privacy and security
of biometric data [18]. The biometric data used in a biometric
system should not leak any information about the
biometric features. It is also required to provide revocability
to the irrevocable biometric data. In password-based
authentication systems or token-based authentication systems,
passwords or tokens are easy to change while it is
compromised. But, biometric traits are inherent and fixed
forever, that is, the biometric data is irrevocable [7]. The
owner of biometric traits is not able to revoke her biometric
when it is compromised. As a result, the biometric
data become useless forever [6]. To overcome this problem,
it demands a cancelable transformation [18,19] of
biometric template to provide revocability to the irrevocable
biometric. Simultaneously, it would ensure the privacy
of biometric data [5], so that the transformed template
does not leak any information about the original template.
Moreover, biometric data is required to be transmitted
over non-secure communication channels for remote use.
Therefore, there is a need to generate cryptographic key,
which is revocable and non-invertible fromthe biometrics
of two different users without compromising the privacy
and security of the biometrics involved in key generation
process.