Abstract
In the last decade, mobile devices become a storage place for highly sensitive information such as authentication credentials, bank account information, etc. However, smartphones are more likely to be lost or stolen than desktops or even laptops, putting user data at a high risk of being compromised. Malware and legitimate vulnerable applications can also be a threat to data disclosure. Therefore, this work focuses on preserving the confidentiality of the information stored in mobile devices from unauthorized access and specifically in the Android platform using a fuzzy vault-based key binding algorithm. The proposed approach aims to conceal the cryptographic key with the user's fingerprint such that only the genuine user will be authorized to access the secret key.