Authentication Techniques Research Articles

ENHANCED GRAPHICAL PASSWORD AUTHENTICATION SYSTEM IN BANKING SECTOR

A bank plays a essential role in people s life and security of the customer is the most important. In order to protect the user account the authentication must be secured. The generalmethod which is used is textual password. Graphical Password technique is used to enhance the security of the banking website and to provide an alternative to the alphanumeric password techniques. There is a lot of security breaches can take placein a banking transaction. The Proposed methodis implemented to secure the transactions by executing three step verification processes. Passwords at multiple levels in the banking system ensure higher security. It eradicates unauthorized users at the very initial stages. Cued Click Point technique, Message Digest 5(MD5) algorithm and Reverse One Time Password are used to implement the enhanced graphical password authentication system. Multi-level passwords are proven to be more secure as compared with the current authentication techniques.

STEB: A secure service trading ecosystem based on blockchain.

A service can be an intangible commodity in which no physical goods are transferred from the seller to the buyer. However, traditional trading platforms have many limitations in trading services due to dishonest buyers and brokers. In this paper, we propose a service trading ecosystem based on blockchain, named STEB, which combines blockchain, smart contract, encryption, and digital authentication techniques for service trading. In addition, a dual-chain architecture, which contains two types of blockchains, namely TraChain and SerChain, and a hierarchical encryption scheme of the data on the chain, are proposed to ensure the integrity of transaction data and fine-grained privacy protection of users. Furthermore, we describe a new set of smart contracts to ensure safe transactions for the entire service trading. Security analysis and simulation results confirm that the proposed STEB can achieve more efficient contract execution and enhance service transaction privacy.

Blockchain-based trust management and authentication of devices in smart grid

The digitalization of the power grid and advancement in intelligent technologies have enabled the service provider to convert the existing electrical grid into a smart grid. The transformation of the grid will help in integrating cleaner energy technologies with energy management to improve power network efficiency. Internet of things (IoT) and various network components need to be deployed to harness the full potential of the smart grid. Also, integrating intermittent renewable energy sources, energy storage, intelligent control of selected power-intensive loads, etc will improve energy efficiency. But deployment of this information and communication technologies will make the grid more vulnerable to cyber attacks from hackers. In this work, blockchain-based self-sovereign identification and authentication technique is presented to avert identity theft and masquerading. The proposed approach can minimize the chances of identity-based security breaches in the smart grid. This paper provides an overview of the model of identification and authentication of IoT devices in Smart Grid based on Blockchain technology. The Blockchain based implementation of identification and authentication of devices is proposed to validate the model in the distributed electrical energy network. The model is able to authenticate the device using Blockchain in a trusted model. The system works according to plan validating the authenticity of transaction in a node in log(n) time, which justifies presented result.

Personal Authentication System Based on Iris Recognition and Digital Signature Technology

Authentication based on biometrics is being used to prevent physical access to high-security institutions. Recently, due to the rapid rise of information system technologies, biometrics is now being used in applications to access databases and commercial workflow systems. These applications need to implement measures to counter security threats. Many developers are exploring and developing novel authentication techniques to prevent these attacks. However, the most challenging problem is how to keep biometric data while maintaining the functional performance of identity verification systems. This paper presents a biometrics-based personal authentication system in which a smart card, a Public Key Infrastructure (PKI), and iris verification technologies are combined. Raspberry Pi 4 Model B+ is used as the core of hardware components with an IR Camera. Following that idea, we designed an optimal image processing algorithm in OpenCV, Python, Keras, and sci-kit learn libraries for feature extraction and recognition is chosen for application development in this project. After training, the implemented system gives an accuracy of (97% and 100%) for the left and right (NTU) iris datasets. Later, the person verification based on the iris feature is performed to verify the claimed identity and examine the system authentication. For the NTU iris dataset, the time of key generation, Signature, and Verification is 5.17sec,0.288, and 0.056, respectively. This work offers the realistic architecture to implement identity-based cryptography with biometrics using the Rivest–Shamir–Adleman (RSA) algorithm.

Prototipe Teknik Mutual Authentication Untuk Digital Rights Management

Our research is the adoption of mutual authentication techniques on smart cards for Digital Rights Management (DRM) which is applied using network protocol engineering. We adopted the protocol engineering from the mutual authentication technique owned by the Mifare Desfire smart card. The tests carried out in our research are testing the security aspects of authentication and data confidentiality. Our authentication test is done by changing the client and server master keys that determine the success of authentication. Meanwhile, data confidentiality testing is carried out by tapping data sent from the client to the DRM server. When authentication by the client and server fails, the software is declared invalid and vice versa. The result of our research is the successful implementation of the adoption of the smart card's mutual authentication technique for application protection in DRM including authentication and encryption functions.

Secure and Lightweight Device Recognition Techniques for Constrained Application Protocol : A Survey

Internet of Things is one among the fastest growing technologies which introduced the concept of connecting surrounding things over internet and perform analysis over the data collected and sometimes even store the data for later use, or for historical analysis. There are plenty of things around which can be connected to IoT, some of which might be malicious and its very necessary to identify such devices before they infect the entire system. This paper proposes a survey on the lightweight authentication techniques to identify the devices of IoT for Constrained application protocol. Key Words: Internet of Things(IoT), Authentication, Digital Signature, Constrained Application Protocol(CoAP).

A Novel Secured Multi-Access Edge Computing based VANET with Neuro fuzzy systems based Blockchain Framework

In vehicle ad-hoc networks, the progression of wireless communication technology to 6G, overcomes storage, processing, privacy, and power limits to create an efficient and intelligent next generation transportation system. Vehicular ad hoc network may now offer remarkable availability, reliability, and throughput using 6G technology. However, the VANET system’s data should be protected. This paper proposes an effective batch authentication and key exchange technique to avoid contact with hostile vehicle users. Moreover, three types of systems are proposed: PKI, ID-based, and MAC-based. The neuro-fuzzy inference technique was used to predict VANET security ratings. The Homogeneous Discrete-Time Markov Chain model is used to secure data transit. Additionally, this research examined the work from a blockchain perspective combined with MEC. There are 3 level to comprise the architecture: perception, edge computing, and services. Throughout the blockchain transmission process, the first layer make certain the security of VANET data. The perception layer makes use of edge computing and cloud services on the edge. The service layer protects data by using both traditional cloud storage and blockchain technology. The lowest layer of the system architecture is dedicated to the throughput and quality of service requirements of MEC users. The primary challenge is achieving consensus across blockchain nodes while maintaining the MEC system’s and blockchain’s performance. To simulate the joint optimization problem, a Markov decision process with reward function is utilized. The simulation results are conferred to illustrate the validity of study assertions.

Application of stable isotopic and mineral elemental fingerprints in identifying the geographical origin of concentrated apple juice in China

Food traceability is an important component of food safety and quality. Currently, there is no authentic established technique to identify the origin of concentrated apple juice (CAJ) in China. In this study, the isotopes of δ13C, δ18O and the contents of 32 elements in CAJ from five production areas (BHB, NWR, SCH, LP and YRAR) were determined. The δ13C, δ18O and 28 elements were significantly different (P < 0.05: post-hoc Duncan’s test) in the five production areas. PCA, PLS-DA and OPLS-DA were employed for regional classification of samples. The results show that ten key variables (Tl, Se, δ18O, B, Mg, Sr, Nd, Mo, As, and Na) are more relevant for discrimination of the samples. These findings contribute to understanding the variations of stable isotopic and element compositions in Chinese CAJ depending on geographic origins and offer valuable insight into the control of fraudulent labeling regarding the geographic origins of CAJ.

Mass spectrometry in food authentication and origin traceability.

Food authentication and origin traceability are popular research topics, especially as concerns about food quality continue to increase. Mass spectrometry (MS) plays an indispensable role in food authentication and origin traceability. In this review, the applications of MS in food authentication and origin traceability by analyzing the main components and chemical fingerprints or profiles are summarized. In addition, the characteristic markers for food authentication are also reviewed, and the advantages and disadvantages of MS-based techniques for food authentication, as well as the current trends and challenges, are discussed. The fingerprinting and profiling methods, in combination with multivariate statistical analysis, are more suitable for the authentication of high-value foods, while characteristic marker-based methods are more suitable for adulteration detection. Several new techniques have been introduced to the field, such as proton transfer reaction mass spectrometry, ambient ionization mass spectrometry (AIMS), and ion mobility mass spectrometry, for the determination of food adulteration due to their fast and convenient analysis. As an important trend, the miniaturization of MS offers advantages, such as small and portable instrumentation and fast and nondestructive analysis. Moreover, many applications in food authentication are using AIMS, which can help food authentication in food inspection/field analysis. This review provides a reference and guide for food authentication and traceability based on MS.

Evaluation of portable near-infrared spectroscopy for authentication of mRNA based COVID-19 vaccines.

Since its identification in 2019, Covid-19 has spread to become a global pandemic. Until now, vaccination in its different forms proves to be the most effective measure to control the outbreak and lower the burden of the disease on healthcare systems. This arena has become a prime target to criminal networks that spread counterfeit Covid-19 vaccines across the supply chain mainly for profit. Counterfeit vaccines provide false sense of security to individuals, heightens the risk of exposure and outbreak of the virus, and increase the risk of harm linked to Covid-19 infection. Moreover, the increase in counterfeit vaccines feeds hesitancy towards vaccination and erodes the trust in mass immunisation programmes. It is therefore of paramount importance to work on rapid and reliable methods for vaccine authentication. Subsequently this work utilised a portable and non-destructive near infrared (NIR) spectroscopic method for authentication of Covid-19 vaccines. A total of 405 Covid-19 vaccines samples, alongside their main constituents, were measured as received through glass vials. Spectral quality and bands were inspected by considering the raw spectra of the vaccines. Authentication was explored by applying principal component analysis (PCA) to the multiplicative scatter correction-first derivative spectra. The results showed that NIR spectra of the vaccine featured mainly bands corresponding to the mRNA active ingredient. Fewer bands corresponded to the excipients and protein spectra. The vaccines NIR spectra were strongly absorbing with maximum absorbances up to 2.7 absorbance units and that differentiated them from samples containing normal saline only (constituent reported for counterfeit Covid-19 vaccines). Clustering based on PCA offered optimal authentication of Covid-19 vaccines when applied over the range of 9000–4000 cm-1These findings shed light on the potential of using NIR for analysing Covid-19 vaccines and presents a rapid and effective initial technique for Covid-19 vaccine authentication.

Enhancing Cyber Security of LoRaWAN Gateways under Adversarial Attacks.

The Internet of Things (IoT) has disrupted the IT landscape drastically, and Long Range Wide Area Network (LoRaWAN) is one specification that enables these IoT devices to have access to the Internet. Former security analyses have suggested that the gateways in LoRaWAN in their current state are susceptible to a wide variety of malicious attacks, which can be notoriously difficult to mitigate since gateways are seen as obedient relays by design. These attacks, if not addressed, can cause malfunctions and loss of efficiency in the network traffic. As a solution to this unique problem, this paper presents a novel certificate authentication technique that enhances the cyber security of gateways in the LoRaWAN network. The proposed technique considers a public key infrastructure (PKI) solution that considers a two-tier certificate authority (CA) setup, such as a root-CA and intermediate-CA. This solution is promising, as the simulation results validate that about 66.67% of the packets that are arriving from an illegitimate gateway (GW) are discarded in our implemented secure and reliable solution.

Memory-memory (M2) Authentication.

The article introduces a new type of an authentication technique denoted as memory-memory (M2). A core component of M2 is its ability to collect and populate a voice profile database and use it to perform the verification process. The method relies on a database that includes voice profiles in the form of audio recordings of individuals; the profiles are interconnected based on known relationships between people such that relationships can be used to determine which voice profiles to select to test a person's knowledge of the identity of the people in the recordings (e.g., their names, their relation to each other). Combining widely known concepts (e.g., humans are superior to computers in processing voices and computers are superior to humans in handling data) expects to significantly enhance existing authentication methods (e.g., passwords, biometrics-based).

Implementation of Graphical Password Authentication Technique for Security Using Cued Click Points Algorithm

Abstract: In today's world, most Internet applications still establish user authentication with a traditional text-based password. Designing a secure as well as user-friendly password-based method has long been on the agenda of security researchers. On the one hand, there are password manager programs that make it easy to create site-specific strong passwords from a single user's password to eliminate the memory burden caused by multiple passwords. We offer different levels of authentication such as Textual Authentication, Image Authentication and Audio Authentication to provide better security for applications. User will select username and password while registering in text step. During registration the user has to enter the registered username and password, if it matches the database then the user can log in to the system. In Image Authentication Model, we take image as input from user at the time of registration and put quid point, qud point is selected part of image which is selected by user. At the time of login the user has to select the image and select the part of the image which he/she wants to include at the time of registration, which is called as Cued Points. Keywords: Graphical password, Text based password, usability, security, Attacks, Authentication

Graphical Password Authentication System

Abstract: Graphical password is one of technic for authentication of computer security. Now days digital/computer security is most important things in computer science for protected user or customer data. And Shoulder-surfing is a one of the threats where a criminal can steal a password by direct observation or by recording the authentication session. There are several techniques available for this authentication, the most prevalent and simple of which is the Graphical password technique. So, we suggest a new technique to combat this problem. We have developed two concepts to combat shoulder surfing attacks. First, the user must register if the registration does not exist. Second, you must log in with a valid user ID and password. The password is a grouping of characters and numbers. Third, user has to cross image-based authentication where user can choose their password and this method have higher chances to offset each other. You should choose password according to the registration password, it must to match at login time. In colour base authentication, there should be several colour base passwords and depending on the colour, you need to remember the password sequence. And it’s like three-factor authentication. So, here is proposed a new graphical password authentication technique that is resilient to shoulder surfing and also to other types of probable attacks. Keyword: Computer Authentication, Graphical Password, Computer security

SAuth: a hierarchical implicit authentication mechanism for service robots

With advances in networks, Artificial Intelligence (AI), and the Internet of Things, humanoid robots are rising in many areas, including elderly care, companion, education, and services in public sectors. Given their sensing and communication functionality, information leakage and unauthorized access will be of big concern. Very often, authentication techniques for service robots, especially those related to behavioral identification, have been developed, in which behavior models are created using raw data from sensors. However, behavioral-based authentication and re-authentication is still an open area for research, including cold start problems, accuracy, and uncertainty. This paper proposes a hierarchical implicit authentication system by joint built-in sensors and trust evaluation, coined sAuth, which exploits sensor data-based sliding window trust model to identify the service robot and its expected users. In order to mitigate the fluctuations of identification results in the real world environment, the trust evaluation is computed via combining the weighted intermediate identification probability of various small sliding windows. The performance of sAuth is evaluated under different scenarios where we show that (i) approximately 5–7% higher accuracy and 2–18% lower equal error rate can be achieved by our method compared to other works; and (ii) the hierarchical scheme with joint sensors and trust sliding windows improves the authentication accuracy significantly by comparing it with only sensor-based authentication.

Finger Print Based ATM System

Our Project is to develop the technique for fingerprint authentication in ATMs. This target can be mainly decomposed into image preprocessing, feature extraction and feature match. For each sub-task, some classical and up-to-date methods in literature are analyzed. Based on the analysis, an integrated solution for fingerprint recognition and authentication is developed for demonstration. Our demonstration program is coded in ASP.NET &amp; MATLAB. For the program, some optimization at coding level and algorithm level are proposed to improve the performance of my fingerprint authentication system. These performance enhancements are shown by experiments conducted upon a variety of fingerprint images. Also, the experiments illustrate the key issues of fingerprint recognition that are consistent with what the available literatures say.

A smart secure healthcare monitoring system with Internet of Medical Things

The new era of information technologies made smart healthcare by including edge, Internet of Things (loT), Internet of Medical Things (IoMT), cloud computing etc. This adaptation has partially replaced the old medical system, making healthcare more efficient, easy, and customized. Wireless medical sensors are used in the smart healthcare sector to capture the patient’s health data and transmit it to the remote server for treatment or diagnostic purposes. Every time a cloud-based solution is adopted to collect and preserve the sensitive and personal health information. This collected patient data is shared between the different stakeholders across the network. Due to this, healthcare systems are vulnerable to confidentiality, integrity and privacy threats. Secure data access is a big challenge in such systems. In this paper, a lightweight authentication technique with the privacy-preserving schema using fully homomorphic encryption is proposed. This approach can be used for a secure access of patient data through online mode, and also the data can be shared in an encrypted format for desired purposes of stakeholders. The proposed authentication scheme is for Internet of Medical Things that can resist all network attacks and is easy to implement. The performance analysis of the proposed work shows that overall execution time (80.03%), communication cost (15.62%) and energy consumption (79.19%) is reduced in comparison with existing work.

A Hybrid Graphical Password Technique for Mobile Data Security Based on Direction

Mobile Security has exponentially increased data sensitivitydue to the users upsurge in mobile devices. People are utilizing smartphones as the substitute for desktop or laptop systems, from which they access, download, upload, modify, create, and share their files. Every data has become crucial as and when exposed to other platforms via smartphone. Therefore, all smartphones require security from malicious users. Forthcoming mobile devices will have hybrid graphical passwords as prospects for customer authentication. Users can easily interact with their devices through mixed authentication techniques on mobiles by safely entering the graphical passwords. This paper focuses on Character Set and Direction (CSD) technique developed on the android application for mobiles, which takes a character set and a unique direction as a graphical password for its input method. The significant advantage of the proposed technique is that; it is user-friendly, lightweight, has an extraordinary input/output modality, and has a custom-built mobile application prototype for the Registration and Login Phase. Developed a mobile application for Character set and Direction with four standard directions to construct a unique password scheme and investigate its security, memorability, and graphical user interface. The results are highly encouraging as this technique can be a highly secured authentication technique and high user memorability, and increased usability.

Normative Values of Binocular Vision Parameters: A Systematic Review

This article aims to review population-specific ethnicity-based normal values of binocular vision parameters for diagnosing non-strabismic binocular vision anomalies. Method: Search engines Google Scholar, Sci-Hub, and Pubmed were used to search studies published between 1983 to 2021 using keywords such as normative values, binocular vision parameters, non-strabismic binocular vision anomalies, binocular vision, accommodation, and vergence. Results were presented in tabular form based on the site of study, publication year, and methods used for study for comparison. Results: Several studies have been done in various parts of the world. Mostly, they determined certain parameters of only accommodation or vergence. Recently, some studies have done a comprehensive investigation of both. Mostly these studies were overseen in America followed by Europe, Asia, and Africa. There were differences in methodologies and techniques used. Thus, norms varied among studies. Conclusion: The difference in normative data for NSBV parameters could be because of the disparity in techniques used. The succeeding studies should be done using similar and authentic testing techniques and a good methodology for clarification of these results. It is needed to conduct more studies on the Asian population.

Watermarked Hashing As a Video Content Authentication Technique

The Authentication is the primary problem of cyber security as a dimension. It is just a method of approving a digital proof of identification. Different levels of access or completion of tasks are granted to different individuals, depending on who has signed up for the task at hand. There are many different types of authentication, ranging from passwords to fingerprints to bio metrics. These technologies add a layer of protection and prevent security lapses like data infringements. Digital video authentication is a method of evaluating whether the recorded video is genuine and has not been tampered with. Video hashing is commonly deployed in closer detection, video authentication and video tamper detection and a look for anti-piracy. Perceptual hashing has emerged as a powerful tool for verifying the validity of multimedia content and it continues to pique the interest of experts working in analyzing multimedia domains and spotting illegal or counterfeit videos on the internet.