Improving the accuracy and storage cost in biometric remote authentication schemes

Sarier, Neyire Deniz

doi:10.1016/j.jnca.2009.12.017

Cited by 21 publications

(4 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In 2010, Sarier et al [11] proposed a multi-factor protocol for allowing secure communication between two entities and establishing key agreement with server. Venkatasubramanian et al [12] presented a protocol for physiological signal-based key agreement for authenticated communication between neighbouring nodes in an MSN.…”

Section: Related Workmentioning

confidence: 99%

Multi-Factor Remote User Authentication Scheme for WSN-IoT based Healthcare Services

Vir,

Sharma

2023

Emerging Trends in Engineering and Management

View full text Add to dashboard Cite

With the growth of Wireless Sensor Networks and Internet of Things (IoT) paradigms, real-time remote monitoring of the patients by a remote Medical Professional (MP) has become feasible and patients can enjoy healthcare services at home. However, patient’s medical data stored on servers are highly sensitive and hence, the Wireless Sensor Networks-IOT network becomes open to many attacks. Therefore, it must ensure that patients’ medical data do not get exposed to unauthorized users. This makes strong user authentication essential for the successful global deployment of centralized healthcare systems. In this paper, we present an efficient, strong authentication protocol, for the MP to access patient data for healthcare applications based on Wireless Sensor Networks-IOT network. The proposed protocol includes (1) three-factor MP authentication (i.e., password, biometrics, and smartcard); (2) mutual authentication between MP and the Wireless Sensor Networks server; (3) establishing a secure shared session key; and (4) maintaining key freshness. Furthermore, the proposed protocol uses only two message exchanges between MP and Wireless Sensor Network server and attains efficiency (i.e., low computation and communication costs). Through the formal analysis using the AVISPA web tool, security analysis, and performance analysis, we conclude that the proposed protocol is more secure against potential attacks, and obtains a trade-off between security and performance costs for healthcare applications using Wireless Sensor Networks-IOT networks.

show abstract

Section: Related Workmentioning

confidence: 99%

Multi-Factor Remote User Authentication Scheme for WSN-IoT based Healthcare Services

Vir,

Sharma

2023

Emerging Trends in Engineering and Management

View full text Add to dashboard Cite

show abstract

“…Two independent features from the same biometric are used in this research namely as morphological and statistical which combined and obtained the result an FAR of 0.3% and FRR of 0.54%. The research that has done by [5] is focus on remote biometric based verification. This research describe an efficient multi-factor biometric verification system with improve the accuracy and lower complexity by considering the range of information of every components of the user biometric separately.…”

Section: Research Backgroundmentioning

confidence: 99%

An Accuracy of Attack Detection using Attack Recognition Technique in Multi-Factor Authentication Scheme

Ariffin,

Rahim,

Rum

2019

IJEAT

View full text Add to dashboard Cite

One popular scheme used for authentication security is the implementation of multi-factor authentication (MFA). There have been several researches that discusses on multi-factor authentication scheme but most of these research do not entirely protect data against all types of attacks. Furthermore, most current research only focuses on improving the security part of authentication while neglecting other important parts such as the systems accuracy. Accuracy is based on how perfect is the system able to identify a genuine user or an intruder. Current multifactor authentication schemes were simply not designed to have security and accuracy as their focus. Accuracy can be measured as the success rate on tasks that requires a certain degree. For instance, the number of users who is successfully logging into the system using any technique provides a measure of accuracy. Usually, accuracy demands of users are impacted by other demands such as recall of required information, environmental, or other factors. In authentication, the accuracy factor was identified through the device pairing studies. In many cases in the authentication system requires users to enter a password or biometric traits with 100 percent accuracy for comparing it. Nevertheless, this research analyzes the level of accuracy based on the biometric accuracy of authentication. In this paper will explain the evaluation process on the accuracy level of the proposed authentication to get a highly accurate performance, which is based on FAR (false acceptance rate) and FRR (false rejection rate). Result from the experiment shows that the accuracy of proposed scheme is better than the accuracy of other previous schemes. This is even after additional security features has been added to the scheme.

show abstract

“…However, surprisingly, most schemes have been designed in a heuristic security approach, which just superficially examines the security against the existing well‐known attacks without any mathematical assumption and provably secure result. In fact, many schemes have been found to be flawed and repeatedly redesigned until the flaw has not been found any more .…”

Section: Introductionmentioning

confidence: 99%

Privacy preserving smartcard-based authentication system with provable security

Byun

2015

Security Comm. Networks

View full text Add to dashboard Cite

In this paper, we suggest a new privacy preserving smartcard‐based password authenticated key exchange (SC‐PAKE) with provable security. Only the user who has two secrets (smartcard and password) can go through authentication with key exchange while concealing its identifier from outsider adversaries. For guaranteeing both authentication and identity (ID) protection, we define a security of session key and an anonymity of identifier. We also show that the proposed protocol satisfies two definitions under computational Diffie–Hellman assumption and chosen ciphertext attack (CCA) secure symmetric encryption. One problem is how a common secure key (an encryption/decryption key) can be shared between a server and a user without letting the corresponding server know a certain ID of user. For this issue, we set two kinds of long‐term secrets; one is used to make a symmetric key for ID protection with user's ephemeral value, and the other is issued for helping agreement of a final session key for mutual authentication. Performance analysis shows that the proposed SC‐PAKE has better efficiency in computation and communication costs than recent SC‐PAKE schemes. To the best of our knowledge, it is the first scheme to guarantee both the session key security with authentication and privacy‐enjoying provable security. Copyright © 2015 John Wiley & Sons, Ltd.

show abstract

Improving the accuracy and storage cost in biometric remote authentication schemes

Cited by 21 publications

References 18 publications

Multi-Factor Remote User Authentication Scheme for WSN-IoT based Healthcare Services

Multi-Factor Remote User Authentication Scheme for WSN-IoT based Healthcare Services

An Accuracy of Attack Detection using Attack Recognition Technique in Multi-Factor Authentication Scheme

Privacy preserving smartcard-based authentication system with provable security

Contact Info

Product

Resources

About