View article

In this paper, we propose an electrocardiogram (ECG) biometric scheme that can authenticate patient identities in a healthcare system while protecting the privacy of their transmitted electrocardiogram signal. The presented algorithm is a new technique allowing the authentication device and the target application to share securely the ECG authentication features via an untrusted channel. The technique hides the ECG sensitive data based on the Linear Prediction Coding (LPC). This solution comes as an alternative to the fuzzy vault scheme. In fact we prove, by assessing the algorithm on ECG-Id physionet database, that concealing the features using the LPC technique ensures a similar security level while offering a low computational complexity and communication overhead compared with the fuzzy vault scheme. Moreover, we show that an acceptable recognition rate is preserved.