Authentication Paradigm Research Articles

A Novel OTP Based Pin Generation and Face Recognition Methods in Online Banking

An integral component of contemporary banking is now internet banking. Due to the present password-based authentication paradigms' inadequacies in terms of efficiency and robustness, as well as their susceptibility to automated assaults, several attempts are successful in gaining access to social network accounts. The easiest solution is to add more identifying features, such one-time PIN numbers produced by the user's own device (like a smartphone) or received via SMS, to the single factor (password-based) authentication procedure. Real-time facial recognition technology is a biometric authentication tool that may be used to increase the security of online banking transactions. With the use of this technology, clients' identities may be instantly and conveniently verified. The goal of this project is to create an online banking system that authenticates customers using real-time facial recognition technology. Customers will be able to do banking tasks including money transfers, bill payments, and balance inquiries using the system's user-friendly and secure interface. A face recognition algorithm, such Grassmann Learning, which can record and evaluate a customer's facial traits in real time, will be included into the system. To confirm the customer's identification, the algorithm will match the customer's facial traits with those in the bank's database. PIN verification at a second level using an OTP basis. Using a challenge keypad, the user will produce the PIN number in this technique. The technology would give users a safe and convenient interface to conduct real-time financial transactions. Notifications about banking interface access and amount transactions are sent to the user in this suggested net-banking application.

Efficacy of Keystroke Dynamics-Based User Authentication in the Face of Language Complexity

Introduction: This study investigates the impact of language complexity on Keystroke Dynamics (KD) and its implications for accurate KD-based user authentication system performance in smartphones. Method: This research meticulously analyzes keystroke patterns using 160 volunteers, including both frequently typed and infrequently typed texts. Our analysis of 12 anomaly detection algorithms reveals that a simple text-based KD system consistently outperforms its complex counterpart with superior Equal Error Rates (EERs). Results: As a result, the Scaled Manhattan anomaly detector achieves an EER of 2.48% for simple text and an improvement over 2.98% for complex text. The incorporation of soft biometrics further enhances algorithmic performance, emphasizing strategies to build resilience into KD-based user authentication systems. Conclusion: Throughout this study, the importance of text complexity is emphasized, and innovative pathways are introduced to strengthen KD-based user authentication paradigms.

DNA TRIKKY Based Security Mechanism for Radio Frequency Identification Protocol

Radio frequency identification (RFID) technology has seen rapid expansion in recent years, used in a variety of applications like tracking, monitoring, ticketing, supply-chain management, contactless payments, etc. Several researchers have recommended elliptical curve cryptography (ECC) as a great cryptosystem to pair with RFID technology to increase security and privacy. However, RFID systems have major problems with insecure communication routes, which pose security concerns. In this research, a DNA TRIKKY based security mechanism has been proposed for RFID protocol to mutually authenticate the RFID tag and reader through insecure channels. The proposed solution uses a sponge structure and DNA-XOR to enhance the hash function generation process, preventing sensitive data from being leaked from the backend server. Informal security evaluations provide proof that the proposed method can withstand many attacks. According to performance evaluation, the proposed method performs better than the current protocols, making it ideal for use with RFID systems since it necessitates less processing time, communication costs, and storage costs particularly for the tag. According to the results, the proposed authentication paradigm works well with RFID tags that have limited resources. A comparison of the proposed protocol to other protocols shows that it performs more securely. Studies have found that this method outperforms other existing strategies.

Fast Identity Online 2 :Authentication Technique

Fast Identity Online 2 (FIDO2) emerges as a transformative solution to the vulnerabilities inherent in traditional password-based authentication methods. Leveraging public key cryptography and authenticators, it establishes a passwordless authentication paradigm, extending its relevance beyond web applications to diverse realms such as online payments and government services. This paper explores FIDO2's emphasis on a seamless user experience while bolstering security measures through innovative credential management techniques. The acceptance of FIDO2 on major browsers ensures its usability on mobile devices, with most modern devices equipped to support FIDO2 authentication, thus expanding its reach and applicability. Additionally, its adoption by major tech companies and standards bodies underscores its credibility and potential for widespread adoption. However, challenges remain, including overcoming legacy systems, addressing compatibility issues, and ensuring user education. Despite these challenges, FIDO2 represents a significant advancement in online authentication, offering strong security, usability, and privacy features, positioning it as a key enabler of the passwordless authentication paradigm. Keywords: Public key cryptosystem, challenge, relying party, web browser and web authentication.

Utilizing Real – Time Face Recognition Based Bio-Metric System for Online Transaction

A crucial component of contemporary banking is now online banking. Due to the present password- based authentication paradigm’s inadequacies in terms of efficiency and robust, as well as their suspectibility to automated attacks, several attempts are successful in gaining access to social network accounts. The easiest solution is to add more identifying features, like one-time PIN numbers that are created by the user’s own device(like a smart phone) or sent to them via SMS to the single factor(Password-based) authentication procedure. With the help of this technology, client’s identities may be instantly and conveniently verified. The goal of this project is to create an online banking system that authenticates customer’s using real-time facial recognition technology. The system will be made to offer a safe and convenient user interface that enables users to perform financial operation like bill payment, money transfers, and balance queries. A facial recognition algorithm, such Grassmann learning, which can record and evaluate customer’s facial traits in real time, will be included into the system. To confirm customer’s identification, the algorithm will match the customer’s facial traits with those in the bank’s database. The technology would give users a safe and convenient interface to conduct real-time banking transactions. Notifications about banking amount transactions are sent to the user in this suggested netbanking application.

A Novel Protocol Using Captive Portals for FIDO2 Network Authentication

FIDO2 authentication is starting to be applied in numerous web authentication services, aiming to replace passwords and their known vulnerabilities. However, this new authentication method has not been integrated yet with network authentication systems. In this paper, we introduce FIDO2CAP: FIDO2 Captive-portal Authentication Protocol. Our proposal describes a novel protocol for captive-portal network authentication using FIDO2 Authenticators as security keys and passkeys. For validating our proposal, we have developed a prototype of FIDO2CAP authentication in a mock scenario. Using this prototype, we performed a usability experiment with 15 real users. This work makes the first systematic approach for adapting network authentication to the new authentication paradigm relying on FIDO2 authentication.

Exploring Authentication Paradigms in the Internet of Things: A Comprehensive Scoping Review

In the rapidly expanding domain of the Internet of Things (IoT), ensuring the implementation of robust security measures such as authentication has become paramount to safeguarding sensitive data and maintaining the integrity of connected devices. Symmetry in the IoT commonly denotes the uniformity or equilibrium in data distribution and processing across devices or nodes in a network. Leveraging symmetric patterns can enhance the robustness and scalability of IoT authentication. This scoping review aims to provide a comprehensive overview of recent developments in authentication techniques within the IoT paradigm. It subsequently presents recent research on various IoT authentication schemes, organized around several key research questions. The objective is to decipher the intricacies associated with authentication in the IoT by employing a multi-criteria classification approach. This involves a comprehensive analysis of existing authentication protocols, delineating their respective advantages and disadvantages, and gaining insights into the associated security concerns. The research questions highlighted in the review aim to probe the present scenario of authentication systems utilized in IoT, with a focus on identifying trends and discerning shifts. This review synthesizes insights from scholarly articles to provide a roadmap for future research in IoT authentication. It functions as a valuable resource for establishing theoretical foundations and provides practical implications applicable to practitioners, policymakers, and researchers alike. By elucidating the intricacies of IoT authentication, this review cultivates a profound understanding of the transformative potential and the multifaceted challenges. It establishes the foundation for resilient security measures essential for the sustainable growth of the Internet of Things.

ONLINE BANKING SECURITY WITH REAL TIME FACE RECOGNITION APPROACH

Online banking has become an essential part of modern banking. Many attacks are successful in accessing social network accounts since the current password-based authentication paradigms are not efficient and robust enough as well as vulnerable to automated attacks. The simplest alternative is complementing the single factor (password-based) authentication process with additional identification elements, such as one-time PIN codes, generated by the user’s own device (e.g., the smartphone) or received via SMS. To improve the security of online banking transactions, real-time face recognition technology can be used as a biometric authentication technique. This technology provides a reliable and convenient way of verifying the identity of customers in real-time. The aim of this project is to develop an online banking system that uses real-time face recognition technology for customer authentication. The system will be designed to provide a secure and user-friendly interface that allows customers to carry out banking transactions such as funds transfer, bill payments, and balance inquiries. The system will incorporate a Grassmann Learning algorithm that is capable of capturing and analyzing a customer's facial features in real-time. The algorithm will compare the facial features of the customer with those in the bank's database to verify the customer's identity. Second level verification based on OTP verification in reverse order. The system will provide a secure and user-friendly interface for customers to carry out banking transactions in real-time. In this proposed net banking application notifications are sending to the user regarding banking interface access and amount transaction.

Brightness Based Password Safeguard System with Face Recognition in ATM

the importance of security in the authentication process as well as the increase in threat level posed by such malware has attracted many researchers to the field. Many attacks are successful in accessing social network accounts since the current password-based authentication paradigms are not efficient and robust enough as well as vulnerable to automated attacks. The traditional two-factor authentication mechanisms are not applicable to online social networks because physical token or biometric data cannot be easily used to log into users’ profiles. The simplest alternative is complementing the single factor (password-based) authentication process with additional identification elements, such as one-time PIN codes, generated by the user’s own device (e.g. the smart phone) or received via SMS. Proposed a brightness based authentication mechanism (i.e., Bright Pass) capable of enhancing the security of identity confirmation PIN codes without asking the user to memorize an additional secret value or to solve a complex cognitive task. This method introduces a new input value that is changed at every usage combining a something you know element (i.e., the PIN) with an interface element that cannot be captured by spyware, i.e., a bright or dark circle displayed on the phone screen to tell the user when to digit the correct PIN digit and when to digit a fake one. It prevents the malware from correctly inserting the PIN code, thereby disallowing the possibility to perform critical operations without the user’s agreement. Proposed work also focuses on implementing secure face recognition approach for user authentication. This approach will enhance the performance of ATM system

Security and Usability of a Personalized User Authentication Paradigm: Insights from a Longitudinal Study with Three Healthcare Organizations

This article proposes a user-adaptable and personalized authentication paradigm for healthcare organizations, which anticipates to seamlessly reflect patients’ episodic and autobiographical memories to graphical and textual passwords aiming to improve the security strength of user-selected passwords and provide a positive user experience. We report on a longitudinal study that spanned over 3 years in which three public European healthcare organizations participated to design and evaluate the aforementioned paradigm. Three studies were conducted ( n = 169) with different stakeholders: (1) a verification study aiming to identify existing authentication practices of the three healthcare organizations with diverse stakeholders ( n = 9), (2) a patient-centric feasibility study during which users interacted with the proposed authentication system ( n = 68), and (3) a human guessing attack study focusing on vulnerabilities among people sharing common experiences within location-aware images used for graphical passwords ( n = 92). Results revealed that the suggested paradigm scored high with regard to users’ likeability, perceived security, usability, and trust, but more importantly it assists the creation of more secure passwords. On the downside, the suggested paradigm introduces password guessing vulnerabilities by individuals sharing common experiences with the end users. Findings are expected to scaffold the design of more patient-centric knowledge-based authentication mechanisms within today's dynamic computation realms.

Chitin Synthesis in Yeast: A Matter of Trafficking.

Chitin synthesis has attracted scientific interest for decades as an essential part of fungal biology and for its potential as a target for antifungal therapies. While this interest remains, three decades ago, pioneering molecular studies on chitin synthesis regulation identified the major chitin synthase in yeast, Chs3, as an authentic paradigm in the field of the intracellular trafficking of integral membrane proteins. Over the years, researchers have shown how the intracellular trafficking of Chs3 recapitulates all the steps in the intracellular trafficking of integral membrane proteins, from their synthesis in the endoplasmic reticulum to their degradation in the vacuole. This trafficking includes specific mechanisms for sorting in the trans-Golgi network, regulated endocytosis, and endosomal recycling at different levels. This review summarizes the work carried out on chitin synthesis regulation, mostly focusing on Chs3 as a molecular model to study the mechanisms involved in the control of the intracellular trafficking of proteins.

A Formal Energy Consumption Analysis to Secure Cluster-Based WSN: A Case Study of Multi-Hop Clustering Algorithm Based on Spectral Classification Using Lightweight Blockchain.

Wireless Sensors Networks are integrating human daily life at a fast rate. Applications cover a wide range of fields, including home security, agriculture, climate change, fire prevention, and so on and so forth. If WSN were initially flat networks, hierarchical, or cluster-based networks have been introduced in order to achieve a better performance in terms of energy efficiency, topology management, delay minimization, load balancing, routing techniques, etc. As cluster-based algorithms proved to be efficient in terms of energy balancing, security has been of less importance in the field. Data shared by nodes in a WSN can be very sensitive depending on the field of application. Therefore, it is important to ensure security at various levels of WSN. This paper proposes a formal modeling of the energy consumed to secure communications in a cluster-based WSN in general. The concept is implemented using the Proof of Authentication (POAh) paradigm of blockchain and applied to a Multi-hop Clustering Algorithm based on spectral classification. The studied metrics are residual energy in the network, the number of alive nodes, first and last dead node.

Legal Studies and Authentic Paradigm: An Idea for Reforming National Laws

Legal Studies and Authentic Paradigm: An Idea for Reforming National Laws

The evolution of alternative dispute resolution and online dispute resolution in the European Un

The evolution of Online Dispute Resolution (ODR) as an augmentation from Alternative Dispute Resolution (ADR) may lead to an authentic paradigm shift in the way disputes are handled beyond the traditional court systems. To assess state of the art and convey awareness, this paper explores the regulatory landscape of the European Union (EU) using the United Kingdom and Estonia to illustrate the key advancements and shortcomings of the supranational strategy. It discusses the relationships between ADR capabilities and its productive use in ODR, the ODR deployment and adoption, and the consequences that may arise if dispute resolution technologies leapfrog. The paper also speaks of automation and suggests the need to build integrative models into Artificial Intelligence (AI) - powered ODR platforms. It is apparent that the early challenges in the development of the ADR culture in the EU are still unresolved, affecting the proper integration of ADR principles and ODR technologies. A more effective coupling could be expected to smooth digital trade interactions by increasing access to justice and consumer trust in the redress capacities of the Dispute Resolution System (DRS) as a whole.

Capturing human trophoblast development with naive pluripotent stem cells invitro.

Trophoblasts are extraembryonic cells that are essential for maintaining pregnancy. Human trophoblasts arise from the morula as trophectoderm (TE), which, after implantation, differentiates into cytotrophoblasts (CTs), syncytiotrophoblasts (STs), and extravillous trophoblasts (EVTs), composing the placenta. Here we show that naïve, but not primed, human pluripotent stem cells (PSCs) recapitulate trophoblast development. Naive PSC-derived TE and CTs (nCTs) recreated human and monkey TE-to-CT transition. nCTs self-renewed as CT stem cells and had the characteristics of proliferating villous CTs and CTs in the cell column of the first trimester. Notably, although primed PSCs differentiated into trophoblast-like cells (BMP4, A83-01, and PD173074 [BAP]-treated primed PSCs [pBAPs]), pBAPs were distinct from nCTs and human placenta-derived CT stem cells, exhibiting properties consistent with the amnion. Our findings establish an authentic paradigm for human trophoblast development, demonstrating the invaluable properties of naive human PSCs. Our system provides a platform to study the molecular mechanisms underlying trophoblast development and related diseases.

A Hybrid Dynamic Encryption Scheme for Multi-Factor Verification: A Novel Paradigm for Remote Authentication.

A significant percentage of security research that is conducted suffers from common issues that prevent wide-scale adoption. Common snags of such proposed methods tend to include (i) introduction of additional nodes within the communication architecture, breaking the simplicity of the typical client–server model, or fundamental restructuring of the Internet ecosystem; (ii) significant inflation of responsibilities or duties for the user and/or server operator; and (iii) adding increased risks surrounding sensitive data during the authentication process. Many schemes seek to prevent brute-forcing attacks; they often ignore either partially or holistically the dangers of other cyber-attacks such as MiTM or replay attacks. Therefore, there is no incentive to implement such proposals, and it has become the norm instead to inflate current username/password authentication systems. These have remained standard within client–server authentication paradigms, despite insecurities stemming from poor user and server operator practices, and vulnerabilities to interception and masquerades. Besides these vulnerabilities, systems which revolve around secure authentication typically present exploits of two categories; either pitfalls which allow MiTM or replay attacks due to transmitting data for authentication constantly, or the storage of sensitive information leading to highly specific methods of data storage or facilitation, increasing chances of human error. This paper proposes a more secure method of authentication that retains the current structure of accepted paradigms, but minimizes vulnerabilities which result from the process, and does not inflate responsibilities for users or server operators. The proposed scheme uses a hybrid, layered encryption technique alongside a two-part verification process, and provides dynamic protection against interception-based cyber-attacks such as replay or MiTM attacks, without creating additional vulnerabilities for other attacks such as bruteforcing. Results show the proposed mechanism outperforms not only standardized methods, but also other schemes in terms of deployability, exploit resilience, and speed.

Steve de Gruchy’s theology and development model

The article sets out to demonstrate that Steve de Gruchy’s model of Theology and Development (T&D), as opposed to Theologized Development or Developmental Theology, is a creative and an authentic paradigm which is in continuum with African Theology of Reconstruction (ATOR) and other theological initiatives in postcolonial Africa. As a post-colonial and/or post-apartheid theologian, De Gruchy addresses cutting-edge issues facing our contemporary society such as health, poverty, environment, sustainable livelihoods, the South-North divides, fair trade, the racial equation, the reconstruction of our social consciousness; and indeed, the changing circumstances in post-colonial (south) Africa. In its methodology, the article also hypothesizes that Development and Reconstruction are two sides of the same coin, with one clear motif, though with some distinctions. It then goes on to point out the possibility that the Leadership and Development programme that was started by Klaus Nürnberger at the then University of Natal, Pietermaritzburg, logically preceded de Gruchy’s Theology and Development (T&D) programme which continues to date, despite his demise in 2010. On the whole, the T&D and ATOR are largely seen as livelihoods theologies “from the other side of the river” that are geared towards sustainable living, especially with reference to the African context in the 21st century. Steve de Gruchy’s contribution to development studies is certainly critical considering that he published extensively on the same; and even headed the Theology and Development programme at the then University of Natal (now KwaZulu-Natal). His approach turns out as the beacon that maps the way out as we focus on sustainable development and the post-colonial reconstruction of Africa.

Una fundamentación universalita de los derechos humanos

El artículo pretende establecer el contexto teórico general para propiciar una discusión en torno a la apremiante tarea de fundamentar los derechos humanos desde un criterio universalista. Se intentará proveer a los derechos humanos de una justificación teórica universal más allá de la que contiene su simple enunciación como derechos universales. Se recurre a la filosofía normativa kantiana, que es un paradigma del análisis de los enunciados con contenido normativo, para acometer el propósito de dotar a los derechos humanos de una fundamentación propiamente normativa, es decir, en su contenido intrínseco como normas. Una fundamentación en sentido universalista es aquella que tiene su fuerza vinculante en el contenido de la norma en sí misma, en su estructura lógica.

Active authentication using file system decoys and user behavior modeling: results of a large scale study

Abstract Data theft is a growing threat to consumers and organizations which existing security safeguards do not sufficiently address. In particular, existing authentication mechanisms are frequently bypassed or circumvented although in situations where attacks are launched by malicious insiders who already possess valid credentials. We propose methods to enhance existing authentication paradigms with continuous active authentication. Our system adds additional levels of security without burdening the user with more credentials to manage. We utilize two complementary authentication modalities to validate user-identity: (1) behavior profiling for user-system interaction, and (2) baiting adversaries using automatically distributed file-decoy tripwires. We present the results from a 160-subject user study used to validate our system. Our results show that the presence of decoy documents on a system does not interfere with normal user activities, and that, with 95% accuracy, our system will detect an intrusion within 15 minutes with at most one false-positive for 40 hours of user activity.

Sketch-Based User Authentication With a Novel String Edit Distance Model

The vast majority of user authentication in digital applications is based on alphanumeric passwords. Yet, due to severe problems that might arise with this approach, various efforts have been made in the last decade to replace this authentication paradigm. One candidate for the prospective paradigm shift might be found in the field of graphical passwords. The present paper introduces a novel framework for user authentication based on freehand sketches. The basic idea is that during the registration phase a user draws an arbitrary sketch in a specific drawing canvas (rather than typing a password). Registered users can then be authenticated whenever they are able to reproduce their personal sketch with sufficient precision. The major challenge of such a system is twofold. First, it has to provide a certain degree of error-tolerance such that the authentication of genuine users can be smoothly accomplished. Second, the system should detect even subtle forgeries and reject possible intruders. The main contributions of this paper are as follows. First, we formally represent the underlying sketches by means of strings and present a general authentication algorithm that is based on structural pattern recognition. Second, we present a novel cost model that is particularly useful in conjunction with string matching. Third, by means of an exhaustive empirical investigation using both random and skilled forgeries (stemming from several hundreds of users) we empirically confirm the feasibility of this particular authentication framework in a real-world scenario.