The Security of Biometric Data in Devices with Cancellable Biometrics Technology: A Systematic Review of the Literature

In recent years, the use of various biometric technologies has seen exponential growth for biometric recognition and authentication. This expansion is due to the widespread adoption of biometric systems on a day-to-day basis. However, unlike credit cards and passwords, which can be revoked and reissued in the event of a compromise, biometric data is permanently associated with a user and cannot be replaced. This article focuses on the security of biometric data on devices that use cancellable biometrics technology. The crucial importance of protecting biometric information is discussed and a comparison is made with other authentication methods, whether traditional, biological or auxiliary. In addition, it delves into current biometric authentication technologies, highlighting the relevance of various non-invertible or cancellable biometric template protection schemes. These schemes are evaluated based on the risks associated with the security and privacy of biometric data, including identity theft. On the other hand, the use of cancellable methods to evaluate authentication queries and compare biometric information in a protected environment is mentioned. The critical importance of exercising caution when comparing different non-investable biometric template protection schemes is underlined, especially based on reported performance outcomes, given their considerable influence on the security and privacy of biometric data.