Skip to Content
You are currently on the new version of our website. Access the old version .
Future InternetFuture Internet
  • Article
  • Open Access

7 November 2026

29 Pages

A Template-Free Fingerprint-Based Biometric Cryptosystem for Reproducible Blockchain Private-Key Generation

,
and
1
Department of Electrical and Information Engineering, Covenant University, Ota 112233, Ogun State, Nigeria
2
Department of Auditing, College of Accounting Science, University of South Africa, Preller Street, Muckleneuk, Pretoria 0002, South Africa
3
3 Department of Electrical and Information Engineering, Landmark University, Omu-Aran 251103, Kwara State, Nigeria
*
Authors to whom correspondence should be addressed.

Abstract

Private keys are the single point of failure in blockchain systems; if lost, assets are irrecoverable, and if stored, they are exposed. This paper presents a template-free biometric cryptosystem that regenerates a 256-bit private key directly from a fingerprint, storing neither the biometric template nor the key. A Siamese convolutional network trained with a two-stage composite loss produces a 1024-bit binary representation; an adaptive, margin-based binarisation with stability-aware selection retains 288 reliable bits; and a block-wise BCH fuzzy extractor regenerates the exact key, while a layered scheme of Scrypt, AES-256-GCM, and Shamir secret sharing protects the helper data. Evaluated on the PolyU fingerprint dataset under a strict cross-session protocol, the system reduces the mean intra-user bit error rate from 8.13% to 2.35%, attains an equal-error rate of 6.27% and an area under the curve of 0.9831, and achieves a 95.83% key-reconstruction success rate with a 0% false key-acceptance rate. The 288-bit key has an estimated effective min-entropy of 269 bits, and helper-data leakage is negligible (mutual information 0.0132). The results show that template-free, cross-session key generation is feasible at the 256-bit level required for blockchain.

Article Metrics

Citations

Article Access Statistics

Multiple requests from the same IP address are counted as one view.