Biometric Authentication and Authorization Infrastructures in Trusted Intra-Organizational Relationships

Abstract

Today, the lives of both people and organizations are strongly focused on the creation, development and maintenance of relationships. These are influenced by several factors, amongst which trust plays an important role. Same as in traditional relationships, trust is considered crucial in their digital equivalent; here we can speak of the concept of trust in technology. An example for trust in technology is given by biometric authentication and authorization infrastructures. A possible approach is the use of typing behavior biometrics as authentication method. This provides a higher security, considering several biometric specific problems like replay attacks or template aging. The intra-organizational environment allows an interesting solution to these problems, namely the synchronization of biometric data within a federation of applications running in the same company. This paper presents the influence of the proposed authentication model on trust by means of the technical-formal-informal model inside an organization.

Biometric authentication as a service for enterprise identity management deployment: a data protection perspective

“…Thus the dependency on a dedicated hardware infrastructure is very low compared to alternative methods such as fingerprint or iris recognition, where the broad availability of the required sensory infrastructure in a standardized way cannot be assumed [33]. Consequently, biometric systems based on keystroke dynamics are highly applicable for the implementation of web-based authentication systems [30,33]. Therefore we base the following on such a method.…”

“…The last case is referred to as Authentication as a Service (AaaS) and described in the following section. Furthermore, [30] surveys quality and security problems related to web-based biometric authentication services in user-centric IdM.…”

Single Sign-On in Cloud Computing Scenarios: A Research Proposal

“…Trust relationships with the service provider become a critical aspect to be considered each time a user gives an authentication, as highlighted in [4] where this issue is considered in term of risk management: "What is important is risk management, the sister, the dual of trust management. And because risk management makes money, it drives the security world from here on out".…”