Abstract: Biometric has been the important method for identity authentication due to the uniqueness, permanence and identifiability of the biological characteristic, but also pose challenges for privacy. Biometrics system should meet six protection goals: confidentiality, integrity, availability, unlinkability, transparency, and intevenability. In this paper, the requirements and implications of these goals are analyzed, and the relevant techniques and implementation methods are proposed including biometric encryption, cancelable biometric, homomorphic encryption, anonymization, de-identification, diversification, renewable biometric reference, data isolation, as well as management principles and criterion of conduct besides technical measures.

Key words: biometric, privacy, confidentiality, integrity, availability, unlinkability, transparency, intevenability

摘要： 生物特征的唯一性、持久性和可识别性推动生物特征识别成为身份认证的重要鉴别手段，但同时也对隐私保护提出了挑战。生物特征识别系统应满足隐私保护的六大保护目标：保密性、完整性、可用性、不可链接性、透明性和可干预性。本文首先分析了上述保护目标的需求，然后针对上述目标分别提出了相应的隐私保护技术手段和实现方法，包括：生物特征加密技术、可撤销生物特征、同态加密技术、匿名化和去标识化技术、多样化技术、可更新生物特征参考、数据隔离等等，并讨论了技术手段之外的管理原则和行为准则。

关键词: 生物特征识别, 隐私保护, 保密性, 完整性, 可用性, 不可链接性, 透明性, 可干预性