Authentication Solution Research Articles

GDAR: A Secure Authentication for Dapp Interoperability in Blockchain

Enterprises are adopting blockchain technology to build a server-less and trust-less system by assuring immutability and are contributing to blockchain research, innovation, and implementation. This led to the genesis of various decentralized blockchain platforms and applications that are unconnected with each other. Interoperability between these siloed blockchains is a must to reach its full potential. To facilitate mass adoption, technology should have the ability to transact between various decentralized applications (dapps) on the same chain, integrate with existing systems, and initiate transactions on other networks. In our research, we propose a secured authentication mechanism that enables various decentralized applications on the same chain to interact with each other using a global dapp authentication registry (GDAR). We carried out an in-depth performance evaluation and conclude that our proposed mechanism is an operative authentication solution for dapp interoperability.

Blockchain-Enhanced Multi-Factor Authentication for Securing IoT Children's Toys

The rapid expansion of Internet of Things (IoT) devices underscores the critical importance of robust security protocols, particularly in the realm of children's toys. This study introduces an innovative multi-factor authentication strategy integrating Quick Response (QR) codes with Blockchain technology to fortify the security of IoT toys designed for children. The primary objective is to safeguard young users against potential threats stemming from unauthorized access, thereby ensuring a secure interaction with IoT-enabled toys. By amalgamating authentication factors, including QR codes, the proposed approach establishes a multilayered security framework. Leveraging the inherent immutability and transparency of Blockchain, the system verifies the authenticity of IoT toys by scanning a unique QR code, thus mitigating risks associated with malwares and unauthorized access. The decentralization of Blockchain ensures no single point of failure, enhancing resilience against cyber threats. Extensive usability studies underscore the efficacy and practicality of the advanced multi-factor authentication solution, poised to elevate the safety standards of IoT toys in the digital age. This innovative approach not only bolsters security but also fosters trust among users, enabling seamless and worry-free interaction with IoT-enabled toys for children worldwide.

Proposal of a Biobased and Biodegradable Polymer as a Hot Embossing Substrate for Holographic Security Marks Fabrication

ABSTRACTThe alarming increase in counterfeiting has determined a more intensive application of authentication solutions such as holographic security marks. Polycarbonate or polymethyl methacrylate currently used in the hot embossing process to produce security marks are discarded as non‐biodegradable waste after utilization. For the first time, poly(lactic acid) (PLA) was studied here as a hot‐embossing substrate to imprint a micro‐relief containing diffractive gratings, as a stage in the fabrication of holographic security marks. Four PLA grades, which differ by crystallinity and mechanical properties, were used to define the suitability of PLA for hot embossing. The 3D topography of embossed micro‐relief in PLA plates was investigated by quantitative phase imaging, scanning electron microscopy, and atomic force microscopy (AFM). The analyses showed that a high crystallinity and a low d‐lactide content of PLA render the hot‐embossing process more difficult and decrease the quality of the imprinted micro‐relief. The average height of the micro‐relief and the difference in height values, which were determined by AFM, allowed the ranking of the PLA grades according to the quality of the diffracted image. The possibility of recycling the embossed PLA substrate several times before composting was also demonstrated in this work. The variation of the mechanical properties, thermal stability, melting, and crystallization behaviors after each recycling cycle has shown that PLA can be reprocessed six times without significant damage to the properties. This study demonstrated that PLA can replace petroleum‐based polymers in the fabrication of holographic security marks and its suitability for a plethora of optoelectronics applications.

Ensuring the integrity assessment of IoT medical sensors using hesitant fuzzy sets.

Objective: The Internet of Medical Things (IoMT) is transforming healthcare systems, but concerns about device integrity and sensitive data are growing. The study aims to develop a framework for evaluating and prioritizing integrity schemes in healthcare for IoT-based medical sensor devices, addressing the challenges of selecting the right authentication solution due to its complexity and intricacy. Methods: A unified health-hesitant fuzzy expert system for IoMT sensor integrity assessment in Saudi Arabia is described in this paper. Medical sensor integrity literature and professionals are contacted first. Delphi is used to gather attributes of integrity approaches while an Internet of Things medical sensor integrity specialist supervises the operation. After collecting characteristics, good assessment criteria are created and the hesitant fuzzy analytic network procedure is used to assess integrity. Results: Functional integrity and measurement accuracy are the biggest factors in IoMT sensor security and integrity, according to assessment. The framework achieves 93%, 94%, and 95% precision, accuracy, and recall compared to current approaches. The framework helps healthcare integrity security professionals and stakeholders assess and resolve IoT medical sensor authentication issues. Conclusion: This health-hesitant fuzzy expert system will let Saudi Arabian and international healthcare stakeholders safely deploy IoMT sensors in the changing healthcare landscape.

Multimodal biometric integration: Trends and insights from the past quinquennial

Recent years have seen a notable breakthrough in multimodal biometric systems, which combine numerous biometric modalities for increased security and accuracy. This paper offers a thorough analysis of recent advances in the field, addressing the many multimodal biometric strategies that have been put out by different researchers. Numerous modalities are covered by the evaluation, such as palm print, speech, iris, facial features, palm print, fingerprint, body form, gait, and more. To obtain amazing results in terms of accuracy and security, researchers have used cutting-edge methods like convolutional neural networks (CNNs), support vector machines (SVM), recurrent neural networks (RNNs), deep learning, and optimization algorithms. Many fusion strategies have been investigated to efficiently merge data from many modalities, such as feature-level fusion, decision-level fusion, and score-level fusion. Developments in template protection systems have also addressed security issues related to transmission and storage of biometric data. Even though a lot of the suggested systems have shown great accuracy rates, there are still issues with hardware restrictions, dataset biases, privacy problems, and computational costs. Prospective study avenues encompass investigating more extensive and heterogeneous datasets, crafting resilient fusion algorithms, and amalgamating cutting-edge technologies like deep learning-based biometric cryptosystems and federated learning. All things considered, the literature study demonstrates the enormous potential of multimodal biometric systems in offering safe and dependable authentication solutions for a wide range of applications, from on-line student authentication and proctoring systems to customized healthcare networks.

NASTRA: accurate analysis of short tandem repeat markers by nanopore sequencing with repeat-structure-aware algorithm.

Short-tandem repeats (STRs) are the type of genetic markers extensively utilized in biomedical and forensic applications. Due to sequencing noise in nanopore sequencing, accurate analysis methods are lacking. We developed NASTRA, an innovative tool for Nanopore Autosomal Short Tandem Repeat Analysis, which overcomes traditional database-based methods' limitations and provides a precise germline analysis of STR genetic markers without the need for allele sequence reference. Demonstrating high accuracy in cell line authentication testing and paternity testing, NASTRA significantly surpasses existing methods in both speed and accuracy. This advancement makes it a promising solution for rapid cell line authentication and kinship testing, highlighting the potential of nanopore sequencing for in-field applications.

Robust and efficient three-factor authentication solution for WSN-based industrial IoT deployment

The relentless advancements in Cyber-Physical Systems (CPS) and Wireless Sensor Networks (WSN) have paved the way for various practical applications across networking, public safety, smart transportation, and industrial sectors. The Industrial Internet of Things (IIoT) integrates these technologies into complex, interconnected environments where vast amounts of data are transmitted between devices and systems. However, the inherent openness of communication channels in IIoT systems introduces distinctive security and privacy vulnerabilities, where malevolent entities can effortlessly intercept, forge, or delete communication messages. These vulnerabilities are exacerbated by the critical nature of industrial applications, where breaches can lead to significant operational disruptions or safety hazards To address these challenges, several authentication protocols have been proposed. Nevertheless, many of these protocols remain susceptible to various security attacks. To ensure privacy and security in IIoT environments, we introduce a robust and efficient authentication protocol for a WSN-based IIoT environment. This protocol preserves the privacy of information transmitted among all entities and provides an effective solution for securing this sensitive information. Additionally, we present a detailed security analysis of the proposed protocol to formally and informally demonstrate its security strength. The performance analysis is carried out to compare the proposed protocol against existing related protocols, with results unequivocally demonstrating that our protocol offers enhanced privacy and security with reduced costs.

Enhancing Data Warehouse Security: An Encrypted Cued-Click-Points Authentication Approach

Text passwords and other traditional security measures have been the mainstay of current data warehouse content security techniques. Due to the growing computational capability of information systems, security requirements, especially for the selection of secure text passwords, have changed throughout time. Because database administrators are either unaware of these changes or are overburdened by the magnitude of the adjustments necessary to remedy them, these vulnerabilities are typically invisible to them. As a result, research on usable authentication schemes have picked up steam, with the goal of developing a secure authentication method using cued click points and encryption techniques for accessing a hybrid data warehouse. This scheme aims to enhance the security of data access by combining the unique characteristics of cued click points with encryption to create a robust authentication system. The project will involve designing and implementing the authentication scheme, testing its effectiveness in a hybrid data warehouse environment, and evaluating its performance in terms of security and usability. Overall, the project aims to provide a secure and user-friendly authentication solution for accessing sensitive data in a hybrid data warehouse setting. This scheme utilizes a combination of encryption techniques and user-specific click points to verify user identity and access to the data warehouse. It also discusses the potential benefits of this authentication scheme in terms of data security and user experience.

TWO QUESTIONS: THE MASʾALATĀN AND THE AVICENNIAN CORPUS

AbstractThis article brings to light a previously unedited short treatise, the Masʾalatān (Two Questions), attributed to Avicenna (d. 1037). While the earliest witness to the text is the Ayasofya 4853 manuscript, containing a substantial portion of Avicenna's Nachlass, some of which is integrated into the Mubāḥaṯāt and Taʿlīqāt, the Masʾalatān has remained a standalone work with limited circulation. Consequently, the primary concern revolves around the verification of its authenticity and its feasibility given the available data. This article presents a critical edition of the text alongside a parallel translation but it also serves as a case study on the possibilities of authorship verification. It also compiles information from codicology, nevertheless, it primarily focuses on the commentary that analyses and compares the arguments to Avicenna's unquestionably authentic solutions. The first question addresses whether every existent is spatially located, while the second explores the impossibility of an actual infinite body. The commentary endeavors to interpret the text against the cultural and theological background that may have inspired such inquiries, meanwhile also seeks to address its later influence. In addition to unveiling a hitherto unseen text to the scholarly community for further research, it also offers an insight into the limitations of authorship attribution.

BIAS: A novel secure and efficient biometric-based anonymous authentication scheme

Currently, biometric-based authentication schemes are widely adopted in the field of online payments. Consequently, this has led to an increasing number of people becoming concerned about the privacy-preservation of their biometric data. Gunasinghe et al. presented PrivBioMTAuth, a solution for mobile phone biometric-based authentication designed to protect users’ privacy. However, the solution has drawbacks, such as its impact on the execution efficiency of the authentication protocol or its vulnerability to man-in-the-middle attacks during the authentication phase. Moreover, the user’s biometric image and the password must be revealed to the identity provider, which may raise security concerns. In this work, we present a novel secure and efficient biometric-based anonymous authentication solution with fully succinct verification and significantly lower storage and communication overhead. Different from PrivBioMTAuth, we rely on the NIZK argument given in Groth’s work to reduce the size of the anonymous identity and simplify the verification complexity. In addition, we design a high-performance protocol for conducting large-scale verification of the user’s anonymous identities. We propose an optimized multi-exponentiation argument based on Bayer et al.’s work and utilize it to ensure that a semi-trusted identity provider who seeks to access the users’ sensitive biometric information can faithfully execute the users’ identity registration protocol. The experiment results show that our proposed scheme is efficient and has privacy-preserving capabilities, and it can be applied in the resource-constrained devices.

A novel lightweight multi-factor authentication scheme for MQTT-based IoT applications

The present authentication solutions employed in the Internet of Things (IoT) are either inadequate or computationally intensive, given the resource-constrained nature of IoT devices. This challenges the researchers to devise efficient solutions to embed an important security tenet like authentication. In IoT, the most popular machine-to-machine communication protocol used at the application layer is Message Queuing Telemetry Transport (MQTT). However, the MQTT protocol inherently lacks security-related functions, like authentication, authorization, confidentiality, access control, and data integrity, which is unacceptable for IoT-driven mission-critical applications when connected over public networks. In such a situation, the security is hardened by employing a transport layer security protocol like TLS, which entails significant computational overheads. This paper presents a novel scheme to enhance MQTT security by providing a lightweight multi-factor authentication scheme based on Elliptical curve cryptography. The proposed scheme uses a low-cost signature and a fuzzy extractor to correct errors in imprinted biometrics in noisy environments. This scheme attains mutual authentication, generates a securely agreed-upon session key for secret communication, and guarantees perfect forward secrecy. Furthermore, the rigorous informal security analysis shows the proposed scheme resists cryptographic attacks, including known session critical attacks. Furthermore, an empirical study has been carried out to assess the effectiveness of the proposed scheme in the Cooja simulated environment.

Smartphone video imaging: A versatile, low-cost technology for food authentication

This study presents a low-cost smartphone-based imaging technique called smartphone video imaging (SVI) to capture short videos of samples that are illuminated by a colour-changing screen. Assisted by artificial intelligence, the study develops new capabilities to make SVI a versatile imaging technique such as the hyperspectral imaging (HSI). SVI enables classification of samples with heterogeneous contents, spatial representation of analyte contents and reconstruction of hyperspectral images from videos. When integrated with a residual neural network, SVI outperforms traditional computer vision methods for ginseng classification. Moreover, the technique effectively maps the spatial distribution of saffron purity in powder mixtures with predictive performance that is comparable to that of HSI. In addition, SVI combined with the U-Net deep learning module can produce high-quality images that closely resemble the target images acquired by HSI. These results suggest that SVI can serve as a consumer-oriented solution for food authentication.

Comparative Analysis Of Articles 527 And 528 Of The Criminal Code Of Ra, Some Theoretical And Practical Issues On Their Applicability

The subject of this article's study is Articles 527 and 528 of the RA Criminal Code, their similarities and differences, qualification issues. The problem under study is topical, taking into account the adoption of the new criminal code and the introduction of a new crime in it, which is of interest for the study of this article. At the same time, the topicality of the problem is also justified by the fact that, in the conditions of the simultaneous existence of the discussed crimes, there are no clear distinctions regarding theoretical problems and their application in practice. The purpose of this article is to research articles 527 and 528 of the RA Criminal Code, their similarities and differences, discuss some issues related to their practical application and provide author's solutions. The article reveals the problems of qualifying the acts committed by servicemen as evasion of military service or temporarily suspending its individual duties. The article justifies the necessity of introducing Article 528 into the RA Criminal Code and its practical applicability as an independent mechanism for the legislative regulation of self-harms unrelated to military service duties. The conclusions made as a result of the study of the article have the significance of observing the object of study from some theoretical perspectives and showing a systematic approach to the problems arising during practical application.

Adoption of Bloom Filter and Firebase Framework to Enhance Authentication Time for Healthcare Systems Based on Blockchain Technology

Healthcare offers several advantages for actual-time smart healthcare. security concerns are growing due to its constrained computing power, storage capacity, and self-defense capabilities. The tamper-resistant decentralized architecture of more recent blockchain-based authentication solutions gives them significant security features, but they come with a high resource cost because they need a lot of processing power, additional storage, and lengthy authentication processes. Therefore, these challenges offer impediments to achieving the optimal degrees of temporal efficiency and scalability, which are critical for the effective operation of large-scale, time-sensitive IoHT systems. Our work provides an authentication solution specifically created for healthcare systems to address these issues. We work in three phases: initializing, registering, logging in, and authenticating. The suggested system combines blockchain technology, Firebase Framework, Bloom Filter, Multi-Factor authentication, and other elements to improve security and efficiency at the same time. We use the Python programming language to simulate the work, and our findings indicate that the Bloom filter decreases the amount of time it takes to determine whether a person is in the system compared to the previous way. Moreover, using Firebase may reduce transaction numbers by up to 73%. Using the Scyther tool, a security analysis of the proposed scheme proved that the suggested plan is safe from possible threats and maintains the IoHT system's scalability

The universal federator: A third-party authentication solution to federated cloud, edge, and fog

Cloud, Edge, and Fog computing provide computational services to different end users. A federation among these computing paradigms is beneficial, as it enhances the capability, capacity, coverage, and services of cloud, edge, and fog. An authentication method is needed to realize such a federation among cloud, edge, and fog so that a user belonging to one of these computing paradigms can use the services offered by other computing paradigms in the federation without creating a new account. This paper proposes a standard-compliant universal federator that transparently provides third-party authentication among different protocols, used by cloud, edge, and fog, such as 3GPP EPS-AKA, OpenID Connect (OIDC), and 802.1x. The federator provides transparency by using a controller and modules that act as virtual counterparts of the authentication entities in EPS-AKA, OIDC, and 802.1x. These virtual counterparts play multiple roles, depending upon the involved protocols. We deployed a testbed, published our implementation on GitHub, and tested third-party authentication for 16 scenarios across EPS-AKA, OIDC, and 802.1x. The results show that our federator successfully provides third-party authentication while taking 4.07–51.8% of the total authentication time, which ranges between 1.193–3.825 s for 16 scenarios. Some scenarios involving 802.1x take considerably longer due to the bottleneck caused by the 802.1x switch. We also conducted a security analysis to show that our proposed federator fulfills multiple security requirements.

An improved three factor authentication protocol for wireless body area networks

Wireless Body Area Networks (WBAN) is a concrete solution for the healthcare system, and it is paramount to ensure the sensed data by the WBAN sensors is secure against vulnerable threats and inaccessible by unauthorized entities. In light of this, highly robust authentication schemes and solutions are essential for the successful adoption of WBANs. To this end, a plethora of secure authentication solutions have been recommended by investigators over the past few decades. However, the absence of cohesive research work in view of secure mutual authentication schemes does not light on the extensive purpose of offering a bird’s-eye solution to the domain. To address the security issues in the previous schemes, we approach them in the following manner: We reviewed the Ali et al. scheme, a recently proposed authentication scheme for wireless medical sensor networks for healthcare monitoring, asserting that their scheme can withstand various attacks. Despite this, we proved that their scheme still has significant security weaknesses and is vulnerable to various attacks through rigorous cryptanalysis. Afterward, we proposed our three-factor authentication scheme to overcome the vulnerable attacks found in the Ali et al. scheme. Thereafter, we performed an extensive informal and formal analysis using Burrows-Abadi-Needham (BAN) logic to verify the robustness of the proposed scheme. From the analysis, we proved that the proposed authentication scheme is able to withstand various attacks on WBAN. Finally, a critical performance evaluation is done on our scheme. From the results, we identified that our scheme is a robust and identical solution for feature-rich WBAN health-care applications.

Fake Product Identification in E-Commerce Platform using Blockchain Technology

The proposed fake product identification system employs blockchain technology to address the escalating issues of counterfeit goods. Utilizing a decentralized ledger, each product is assigned a unique identifier recorded on the blockchain, which includes important manufacturing details and origin information. Smart contracts streamline the verification process by executing predefined rules to confirm product authenticity. Integration with supply chain systems ensures real-time tracking, enabling consumers to trace a product’s journey from production to sale. Utilizing QR codes consumers gain direct access to blockchain records, empowering them to make informed purchasing decisions. The system’s decentralized nature ensures information immutability, providing a tamper proof solution for product authentication. Collaboration among stakeholders within the blockchain network creates a united front against counterfeiters, fostering a shared responsibility for maintaining supply chain integrity. This globally accessibly solution transcends borders, enhancing international cooperation in combatting counterfeit products and preserving brand credibility.

Blockchain Solutions for Authorization and Authentication

Recently, most people have been looking for smart services that allow them to do their daily services directly without having to visit local businesses and providers [1]. As observed in recent times, citizens can now apply to open their own commercial file or obtain a passport without having to visit the country's economic institution or the Immigration and Passports headquarters. Additionally, applying or opening accounts in virtual banks also added a lot of services and facilities for users and transactions between countries that can be rapidly provisioned with minimal effort [2]. All these transactions require the user's authentication and identity verification to avoid any personal fraud and save the user's rightsBlockchain technology stands out as one of the most secure technologies available enabling secure transactions without the need for a central authority. Starting in 2009 1, with Bitcoin leveraging blockchain technology, there has been an increasing number of blockchain technology-based solutions. The significance of this work compared to its predecessors is that it uses an existing product and technology to prove the solutions offered by Blockchain and find a solution for authorization and authentication.

Modeling security evaluation framework for IoHT-driven systems using integrated decision-making methodology

The intensification of the Internet of Health Things devices created security concerns due to the limitations of these devices and the nature of the healthcare data. While dealing with the security challenges, several authentication schemes, protocols, processes, and standards have been adopted. Consequently, making the right decision regarding the installation of a secure authentication solution or procedure becomes tricky and challenging due to the large number of security protocols, complexity, and lack of understanding. The major objective of this study is to propose an IoHT-based assessment framework for evaluating and prioritizing authentication schemes in the healthcare domain. Initially, in the proposed work, the security issues related to authentication are collected from the literature and consulting experts’ groups. In the second step, features of various authentication schemes are collected under the supervision of an Internet of Things security expert using the Delphi approach. The collected features are used to design suitable criteria for assessment and then Graph Theory and Matrix approach applies for the evaluation of authentication alternatives. Finally, the proposed framework is tested and validated to ensure the results are consistent and accurate by using other multi-criteria decision-making methods. The framework produces promising results such as 93%, 94%, and 95% for precision, accuracy, and recall, respectively in comparison to the existing approaches in this area. The proposed framework can be picked as a guideline by healthcare security experts and stakeholders for the evaluation and decision-making related to authentication issues in IoHT systems

Detection and Counting of Fake Currency & Genuine Currency Using Image Processing

In today's digital age, the proliferation of counterfeit currency poses a significant challenge to financial institutions and businesses worldwide. The detection and prevention of counterfeit currency transactions require advanced technological solutions to safeguard the integrity of financial systems. In our research, we present a novel approach to tackle this problem by leveraging image processing techniques. The proposed system utilizes state-of-the-art image processing algorithms to distinguish between fake and genuine currency notes accurately. By analyzing various features such as texture, color, and watermark patterns, our system can effectively identify counterfeit currency notes with high precision. Additionally, the system is capable of counting and validating genuine currency notes, providing a comprehensive solution for currency authentication and management. The integration of image processing technology into currency verification systems offers numerous benefits, including enhanced accuracy, speed, and reliability. Our research aims to contribute to the development of robust and efficient solutions for combating counterfeit currency fraud, thereby safeguarding the integrity of financial transactions and promoting trust in monetary systems.