Remote authentication using vaulted fingerprint verification

Alzahrani, Hamdan; Boult, Terrance E.

doi:10.1117/12.2053126

Cited by 3 publications

(1 citation statement)

References 51 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There have been several variations of the VV protocol over the years, including extensions to iris [26], fingerprint [2], and voice [12,11,10] biometrics. The latter extensions incorporated public key cryptography, and reduced communication overhead by using index tables.…”

Section: Introductionmentioning

confidence: 99%

CALIPER: Continuous Authentication Layered with Integrated PKI Encoding Recognition

Rudd

Boult

2016

2016 IEEE Conference on Computer Vision and Pattern Recognition Workshops (CVPRW)

Self Cite

View full text Add to dashboard Cite

Architectures relying on continuous authentication require a secure way to challenge the user's identity without trusting that the Continuous Authentication Subsystem (CAS) has not been compromised, i.e., that the response to the layer which manages service/application access is not fake. In this paper, we introduce the CALIPER protocol, in which a separate Continuous Access Verification Entity (CAVE) directly challenges the user's identity in a continuous authentication regime. Instead of simply returning authentication probabilities or confidence scores, CALIPER's CAS uses live hard and soft biometric samples from the user to extract a cryptographic private key embedded in a challenge posed by the CAVE. The CAS then uses this key to sign a response to the CAVE. CALIPER supports multiple modalities, key lengths, and security levels and can be applied in two scenarios: One where the CAS must authenticate its user to a CAVE running on a remote server (device-server) for access to remote application data, and another where the CAS must authenticate its user to a locally running trusted computing module (TCM) for access to local application data (device-TCM). We further demonstrate that CALIPER can leverage device hardware resources to enable privacy and security even when the device's kernel is compromised, and we show how this authentication protocol can even be expanded to obfuscate direct kernel object manipulation (DKOM) malwares.

show abstract

Section: Introductionmentioning

confidence: 99%

CALIPER: Continuous Authentication Layered with Integrated PKI Encoding Recognition

Rudd

Boult

2016

2016 IEEE Conference on Computer Vision and Pattern Recognition Workshops (CVPRW)

Self Cite

View full text Add to dashboard Cite

show abstract

A Novel framework of EEG-based user identification by analyzing music-listening behavior

Kaur

Singh

Roy

2016

Multimed Tools Appl

View full text Add to dashboard Cite

Authentication systems: principles and threats

Abdulkader¹,

Atia²,

Mostafa³

2015

CIS

View full text Add to dashboard Cite

Identity manipulation is considered a serious security issue that has been enlarged with the spread of automated systems that could be accessed either locally or remotely. Availability, integrity, and confidentiality represent the basic requirements that should be granted for successful authentication systems. Personality verification has taken multiple forms depending on different possession types. They are divided into knowledge based, token based, and biometric based authentication. The permanent ownership to the human being has increased the chances of deploying biometrics based authentication in highly secure systems. It includes capturing the biological traits, which are physiological or behavioral, extracting the important features and comparing them to the previously stored features that belong to the claimed user. Various kinds of attacks aim to take down the basic requirements at multiple points. This paper describes different types of authentication along with their vulnerable points and threatening attacks. Then it provides more details about the biometric system structure as well as examples of distinguishing biological characteristics, organized by their locations. It shows the performance results of various biometric systems along with the deployed algorithms for different components.

show abstract

Remote authentication using vaulted fingerprint verification

Cited by 3 publications

References 51 publications

CALIPER: Continuous Authentication Layered with Integrated PKI Encoding Recognition

CALIPER: Continuous Authentication Layered with Integrated PKI Encoding Recognition

A Novel framework of EEG-based user identification by analyzing music-listening behavior

Authentication systems: principles and threats

Contact Info

Product

Resources

About