%0 Conference Proceedings %T Fuzzy Vault for Behavioral Authentication System %+ University of Calgary %A Islam, Md, Morshedul %A Safavi-Naini, Reihaneh %Z Part 7: Access Control and Authentication %< avec comité de lecture %( IFIP Advances in Information and Communication Technology %B 35th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC) %C Maribor, Slovenia %Y Marko Hölbl %Y Kai Rannenberg %Y Tatjana Welzer %I Springer International Publishing %3 ICT Systems Security and Privacy Protection %V AICT-580 %P 295-310 %8 2020-09-21 %D 2020 %R 10.1007/978-3-030-58201-2_20 %K Fuzzy vault %K BA system %K BAVault %Z Computer Science [cs]Conference papers %X A fuzzy vault encrypts a message using fuzzy data such as user’s biometric data as the vault key. Fuzzy vault can be used to protect users’ cryptographic keys in smart cards and inside applications. We consider fuzzy vault based on behavioral data. A behavioral profile of a user consists of a set of features that collectively authenticates the user. Compared to biometric vault behavioral vault has the advantages of being revocable and less privacy sensitive. Fuzzy vaults for behavioral data, however, introduces significant challenges including feature representation, and feature matching algorithms that can provide the required correctness, security, and efficiency. We design and analyze a fuzzy vault based on the user’s behavioral data that employs a novel soft-decision decoding algorithm and implement our design for two behavioral authentication (BA) systems. Our approach is general and can be used for other BA systems. We discuss our results and directions for future research. %G English %Z TC 11 %2 https://inria.hal.science/hal-03440844/document %2 https://inria.hal.science/hal-03440844/file/497034_1_En_20_Chapter.pdf %L hal-03440844 %U https://inria.hal.science/hal-03440844 %~ IFIP %~ IFIP-AICT %~ IFIP-TC %~ IFIP-TC11 %~ IFIP-SEC %~ IFIP-AICT-580