Biometric Authentication Scheme Research Articles

Robust biometric identity authentication scheme using quantum voice encryption and quantum secure direct communications for cybersecurity

A significant problem facing cybersecurity is that most client/server identity authentication schemes depend on computational complexity which is recently challenged by the super exponential computational abilities of quantum computers. Quantum cryptography with its quantum mechanics principles solves this problem and provides mathematically un-hackable secure communication for the quantum computers epoch. Biometric authentication has a big challenge related to its protection as it has to be submitted and stored in encrypted form. Unfortunately, most existing biometric cryptosystems rely on classical cryptography, so they are insecure in quantum era. This problem is solved in this paper by introducing a novel three-factor biometric quantum identity authentication scheme combining something you know (password), something you produce (client’s voice), and something you are (client’s face image) is proposed. The scheme consists of two phases: client enrollment and client login/authentication. The methodology is to use in the enrollment phase, two layers of quantum encryption for the client’s voice signal. Each layer consists of two simple quantum circuits of SWAP and C-NOT quantum gates respectively using a different pseudorandom key obtained from a cellular automata (CA) pseudorandom generator. The proposed scheme has many merits. Firstly, it introduces a new design of muti-factors quantum biometric authentication scheme as the biometric voice data is processed, transmitted, and stored at the server database in an encrypted unconditionally secure quantum form which provides parallel processing, real-time communications, inherent level of security against attacks, tamper-proof security and exponential powerful storage capability due to the quantum properties. Secondly, the proposed scheme achieves double-layers security by combing quantum voice encryption and quantum secure direct communication in one process such that the quantum channel eavesdropper cannot obtain any valuable information in case of information leakage. Thirdly, the distribution and management of encryption key problem is solved as there is no need for key exchange prior to communication. Fourthly, it achieves high communication efficiency as although it is a three-factor biometric identity authentication, only one biometric data is sent in quantum encrypted form to the server. Fifthly, the numerical simulations showed that the proposed scheme has large key space, high key sensitivity and more robust performance against different types of attacks compared to other existing classical and quantum voice encryption schemes. Finally, as an identity authentication method, the proposed scheme achieves identification accuracy of 100% with zero False Rejection Rate (FRR) and zero False acceptance rate (FAR) which is perfect.

Multimodal biometric user authentication using improved decentralized fuzzy vault scheme based on Blockchain network

Biometric security has emerged as a major concern in the field of Biometric Systems. The existing centralized Biometric Cryptosystems approach still suffers from privacy issues and network-based attacks. In particular, the Biometric Cryptosystems are susceptible to Attack via Record Multiplicity, brute force and collusion attacks. To address these issues, this paper proposes a multimodal biometric user authentication scheme using a decentralized fuzzy vault based on Blockchain technology. In this scheme, the facial biometric images and dorsal hand images together form the multimodal biometric. The proposed security framework is implemented in two phases. In the first phase, multimodal biometric user authentication using an improved fuzzy vault scheme is implemented. In the second phase, a privacy preservation technique using a decentralized fuzzy vault biometric system based on the Blockchain network is implemented. The performance of the proposed framework is verified on the biometric datasets consisting of both genuine and imposter users, and a comparative analysis with the existing state-of-the-art approaches is also presented. The Detection Error Trade-off (DET) curve and the Receiver Operating Characteristic (ROC) curve, obtained for verifying the efficacy of the proposed framework, are also presented. The proposed framework yielded an accuracy of 99.8% and an Equal Error Rate of 0.08. Furthermore, to validate the biometric template protection, the security analysis of the proposed scheme based on irreversibility, unlinkability, and revocability criteria is described. The proposed framework achieves significant improvement in terms of a low False Acceptance Rate (0.08), and a high True Acceptance Rate (0.96).

BAKA: Biometric Authentication and Key Agreement Scheme Based on Fuzzy Extractor for Wireless Body Area Networks

BAKA: Biometric Authentication and Key Agreement Scheme Based on Fuzzy Extractor for Wireless Body Area Networks

Anonymous and robust biometric authentication scheme for secure social IoT healthcare applications

In the era of rapid technological advancement, the Internet of Things (IoT) has revolutionised healthcare through systems like the Telecare Medicine Information System (TMIS), designed to streamline patient-doctor interactions and enhance medical treatment. However, the transmission of sensitive patient data over inherently insecure Internet channels exposes it to a spectrum of security risks. Protecting patient medical privacy and ensuring system reliability necessitate mutual authentication between both patients and medical servers. TMIS relies on robust authentication mechanisms, and combining passwords and smart cards has been a recognised approach for mutual authentication. This research introduces an innovative three-factor authentication technique with perfect forward secrecy by leveraging the power of Elliptic Curve Cryptography (ECC) in tandem with smart cards. Additionally, we have incorporated biometric authentication with a Fuzzy Extractor technology to enhance the security and reliability of the system, setting a new standard for user authentication within the realm of Social IoT healthcare. The use of ECC in the method is justified due to its compact key size and robust security measures, making the solution both efficient and secure. The proposed method safeguards user privacy by permitting registered users to change their passwords without divulging their identity to the server. The Burrows–Abadi–Needham logic (also known as the BAN logic) serves as a proof-of-concept for the proposed scheme’s security. Our system provides privacy protection along with mutual authentication and session key negotiation at a considerably low computation cost and communication cost of up to 71.03% compared to the other four relevant techniques, making it more useful in real-world scenarios.

Enhancing eID card mobile-based authentication through 3D facial reconstruction

In recent years the number of credentials and digital identities needed to access online services is exploding, increasing the risk of fraud and unauthorized access to personal data.Biometric verification techniques can help to build more secure authentication systems; in particular face recognition algorithms have reached near perfect accuracy under ideal conditions. In Europe 60% of population owns an electronic identification (eID) document which contains biometric data, and almost all member states provide tools to verify the identity of a user who holds an eID card; however, the adoption of biometric authentication schemes is still limited. Reasons for this low adoption are privacy concerns, about the storage or transmission of personal images, and the degradation of performance of facial recognition algorithms with 2D images acquired "in the wild" (real world condition with inconsistency in lighting and positioning, unclear or occluded facial features, noise from the background). In this paper a new authentication scheme is proposed, exploiting images acquired "in the wild" and 3D facial reconstruction techniques which can help in improving the quality of the probed images, as changes in lighting or position have limited impact on facial shape. Several experiments have been conducted in order to investigate the performance of the proposed method, using the Bosphorus and the NIST Face Recognition Grand Challenge (FRGC) datasets. In particular, one of the most accurate ML face recognition algorithms has been selected to compare the performance of 2D snapshot data, obtained from 3D back-projection, against 2D uncontrolled images acquired "in the wild". We show that using 3D facial reconstructions significantly improve face recognition performance, allowing for a more secure and robust authentication system.

A biometric‐based implicit authentication protocol with privacy protection for ubiquitous communication environments

SummaryDue to the proliferation of the wireless communication technologies, we are now in the era of ubiquitous computing. People can enjoy services almost in any time and any location based on the mobile intelligent devices. Meanwhile, more and more personal information are transmitted through the network. To protect these sensitive information, authentication and privacy protection are primary concerns in ubiquitous communication environments. However, traditional physical‐based biometric authentication scheme usually requires explicit cooperation of the user, which is inconvenient to the users. In order to solve this problem, a behavior biometric authentication protocol with privacy protection is designed using matrix multiplication and homomorphic encryption for ubiquitous communication environments. The correctness, security, and privacy protection properties are proved with security analysis. Performance evaluation shows that our protocol achieves stronger security and higher communication efficiency compared with other related protocols, which makes it very suitable for ubiquitous communication environments because communication consumes much more energy than computation does in mobile communication.

A novel privacy-preserving biometric authentication scheme.

Most existing secure biometric authentication schemes are server-centric, and users must fully trust the server to store, process, and manage their biometric data. As a result, users' biometric data could be leaked by outside attackers or the service provider itself. This paper first constructs the EDZKP protocol based on the inner product, which proves whether the secret value is the Euclidean distance of the secret vectors. Then, combined with the Cuproof protocol, we propose a novel user-centric biometric authentication scheme called BAZKP. In this scheme, all the biometric data remain encrypted during authentication phase, so the server will never see them directly. Meanwhile, the server can determine whether the Euclidean distance of two secret vectors is within a pre-defined threshold by calculation. Security analysis shows BAZKP satisfies completeness, soundness, and zero-knowledge. Based on BAZKP, we propose a privacy-preserving biometric authentication system, and its evaluation demonstrates that it provides reliable and secure authentication.

Attacks and Countermeasures on Privacy-Preserving Biometric Authentication Schemes

Based on the Threshold Predicate Encryption (TPE), the biometric authentication scheme <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">PassBio</i> aims to correctly authenticate genuine end-users without leaking their biometric privacy information. However, this article proposes two impersonation attacks to <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">PassBio</i> by merely sending very few query messages. Specifically, an attacker is able to cheat the authentication server with probability 50% by sending the server a random query, or almost 100% by sending the server a collusion of old genuine queries, without being identified. Moreover, in order to defeat the impersonation attacks, this article presents a Verifiable Threshold Predicate Encryption (VTPE) scheme which includes three components: (1) a multi-segment TPE for reducing the computational cost and communication overhead significantly; (2) a segment-wise watermarking for defeating the random attacks; and (3) a challenge-response mechanism for defeating the replay and collusion attacks. In addition, the watermarking also creates a secure channel between the querying user and the server. The experiments on both simulated feature vectors and real face images demonstrate that the present attacks and countermeasures are effective and efficient.

A Dual Multimodal Biometric Authentication System Based on WOA-ANN and SSA-DBN Techniques

Identity management describes a problem by providing the authorized owners with safe and simple access to information and solutions for specific identification processes. The shortcomings of the unimodal systems have been addressed by the introduction of multimodal biometric systems. The use of multimodal systems has increased the biometric system’s overall recognition rate. A new degree of fusion, known as an intelligent Dual Multimodal Biometric Authentication Scheme, is established in this study. In the proposed work, two multimodal biometric systems are developed by combining three unimodal biometric systems. ECG, sclera, and fingerprint are the unimodal systems selected for this work. The sequential model biometric system is developed using a decision-level fusion based on WOA-ANN. The parallel model biometric system is developed using a score-level fusion based on SSA-DBN. The biometric authentication performs preprocessing, feature extraction, matching, and scoring for each unimodal system. On each biometric attribute, matching scores and individual accuracy are cyphered independently. A matcher performance-based fusion procedure is demonstrated for the three biometric qualities because the matchers on these three traits produce varying values. The two-level fusion technique (score and feature) is implemented separately, and their results with the current scheme are compared to exhibit the optimum model. The suggested plan makes use of the highest TPR, FPR, and accuracy rates.

A survey on computer vision based human analysis in the COVID-19 era.

The emergence of COVID-19 has had a global and profound impact, not only on society as a whole, but also on the lives of individuals. Various prevention measures were introduced around the world to limit the transmission of the disease, including face masks, mandates for social distancing and regular disinfection in public spaces, and the use of screening applications. These developments also triggered the need for novel and improved computer vision techniques capable of providing support to the prevention measures through an automated analysis of visual data, on the one hand, and facilitating normal operation of existing vision-based services, such as biometric authentication schemes, on the other. Especially important here, are computer vision techniques that focus on the analysis of people and faces in visual data and have been affected the most by the partial occlusions introduced by the mandates for facial masks. Such computer vision based human analysis techniques include face and face-mask detection approaches, face recognition techniques, crowd counting solutions, age and expression estimation procedures, models for detecting face-hand interactions and many others, and have seen considerable attention over recent years. The goal of this survey is to provide an introduction to the problems induced by COVID-19 into such research and to present a comprehensive review of the work done in the computer vision based human analysis field. Particular attention is paid to the impact of facial masks on the performance of various methods and recent solutions to mitigate this problem. Additionally, a detailed review of existing datasets useful for the development and evaluation of methods for COVID-19 related applications is also provided. Finally, to help advance the field further, a discussion on the main open challenges and future research direction is given at the end of the survey. This work is intended to have a broad appeal and be useful not only for computer vision researchers but also the general public.

A CANCELLABLE AND IRREVOCABLE APPROACH FOR FINGERPRINT TEMPLATE PROTECTION USING OPTIMAL ITERATIVE SOLUBILITY ALGORITHM AND SECURE POINT BASE

Biometric authentication scheme is a robust, reliable, and convenient way for person authentication with security. It is necessary to protect biometric information for maintaining secrecy. In this paper, fingerprint template protection is carried out using the optimal iterative solubility (OIS) algorithm. The purpose of developing the OIS algorithm is to generate the matrix coefficient of the template protection matrix. The processing steps for fingerprint template protection involve two phases such as enrolment and authentication. In the enrolment phase, the identity vector of the input fingerprint image is generated with the assistance of minutiae points, secure point base (SPB) and OIS algorithm, and then, the database is created. In the authentication phase, the query image is considered as an input, and the identity vector is generated based on the query image in the same manner as enrolment phase. Moreover, the cross indexing-based matching is done using Tanimoto coefficient to make final decisions in order to check whether the user authorization is accepted or rejected. The experimental result demonstrates that the developed OIS algorithm attained a maximum accuracy of 0.96, minimum false acceptance rate (FAR) of 0.077, minimum false rejection rate (FRR) of 0.070, and maximum genuine acceptance rate (GAR) of 0.964, correspondingly.

Post-Quantum Biometric Authentication Based on Homomorphic Encryption and Classic McEliece

Homomorphic encryption is a powerful mechanism that allows sensitive data, such as biometric data, to be compared in a protected way, revealing only the comparison result when the private key is known. This is very useful for non-device-centric authentication architectures with clients that provide protected data and external servers that authenticate them. While many reported solutions do not follow standards and are not resistant to quantum computer attacks, this work proposes a secure biometric authentication scheme that applies homomorphic encryption based on the Classic McEliece public-key encryption algorithm, which is a round 4 candidate of the NIST post-quantum standardization process. The scheme applies specific steps to transform the features extracted from biometric samples. Its use is proposed in a non-device-centric biometric authentication architecture that ensures user privacy. Irreversibility, revocability and unlinkability are satisfied and the scheme is robust to stolen-device, False-Acceptance Rate (FAR) and similarity-based attacks as well as to honest-but-curious servers. In addition to the security achieved by the McEliece system, which remains stable over 40 years of attacks, the proposal allows for very reduced storage and communication overheads as well as low computational cost. A practical implementation of a non-device-centric facial authentication system is illustrated based on the generation and comparison of protected FaceNet embeddings. Experimental results with public databases show that the proposed scheme improves the accuracy and the False-Acceptance Rate of the unprotected scheme, maintaining the False-Rejection Rate, allows real-time execution in clients and servers for Classic McEliece security parameter sets of 128 and 256 bits (mceliece348864 and mceliece6688128, respectively), and reduces storage requirements in more than 90.5% compared to the most reduced-size homomorphic encryption-based schemes with post-quantum security reported in the literature.

BAED: A secured biometric authentication system using ECG signal based on deep learning techniques

Biometric authentication technology has become increasingly common in our daily lives as information protection and control regulation requirements have grown worldwide. A biometric system must be simple, flexible, efficient, and secure from unauthorized access. The most suitable and flexible biometric traits are the face, fingerprint, palm print, voice, electrocardiogram (ECG), and iris. ECGs are difficult to falsify among these biometric traits and are less attack-prone. However, designing biometric systems based on ECG is very challenging. The major limitations of the existing techniques are that they require a large amount of training data and that they are trained and tested on an on-person database. To cope with these issues, this work proposes a novel biometric authentication scheme based on ECG detection called BAED. The system was developed based on deep learning algorithms, including a convolutional neural network (CNN) and a long-term memory (LSTM) network with a customized activation function. The authors evaluated the proposed model with on-and off-person databases including ECG-ID, Physikalisch-Technische Bundesanstalt (PTB), Check Your Bio-signals Here Initiative (CYBHi), and the University of Toronto Database (UofTDB). In addition to the standard performance parameters, certain key supportive identification parameters such as FMR, FNMR, FAR, and FRR were computed and compared to increase the model’s credibility.The proposed BAED system outperforms prior state-of-the-art approaches.

A Novel Biometric Identification Scheme Based on Zero-Knowledge Succinct Noninteractive Argument of Knowledge

Biometric identification is a convenient and reliable method in identity authentication. The widespread adoption of biometric identification requires strong privacy protection against possible theft or loss of biometric data. Existing techniques for privacy-preserving biometric identification mainly rely on traditional cryptographic technology such as oblivious transfer and homomorphic encryption, which will incur huge expenses to the system and cannot be applied to large-scale practical applications. For these issues, we propose a biometric identification scheme by constructing zero-knowledge succinct noninteractive argument of knowledge (zk-SNARK). Our scheme not only reduces the communication overhead, which only needs to send 8 constants to the verifier but also can protect the fingerprint template from disclosure. The time complexity of proof generation and proof verification are about O(C) and O x + log C , respectively, and the size of the proof is only 8 constants, where C and x represent the size of the circuit and the public input, respectively. We have implemented the proposed authentication solution on a public data set of fingerprint images and evaluated the performance and security.

Privacy Preserving Biometric Authentication on the blockchain for smart healthcare

Privacy Preserving Biometric Authentication (PPBA) schemes are designed for anonymous authentication of patients to protect patient’s privacy in accessing healthcare services. Recently, blockchain technology in healthcare has emerged as a new research area to provide tamper-resistance and non-repudiation in e-health systems. One aspect of this research could lead to blockchain-based secure biometric identification for smart healthcare, which may face the paradox of anonymous biometric authentication on public blockchains. In this paper, we describe an efficient, fully anonymous and GDPR-compliant PPBA protocol built into the blockchain of any privacy coin such as Monero. The new protocol provides encrypted offline storage and processing in the encrypted domain. The infrastructure necessary for the online authentication is outsourced to the public blockchain that provides integrity of its data. In addition to auditing capabilities for misbehaving entities, the new system reduces the number of transactions necessary for authentication and enables revocation of biometric identities. We provide new PPBA schemes both for set difference/overlap and Euclidean distance metrics without using bilinear pairings, where the former leads to an efficient solution to the compatibility for organ transplant. We limit the generation of encrypted templates for public testing even if biometric/health data is of low min-entropy. Due to the anonymity of the cryptocurrency, we break the link between the stealth address of an authenticating user and its biometrics. We describe the user and identity privacy notions independent of the underlying privacy coin and guarantee the security of our proposal in the framework of those generic notions. Finally, we simulate the new proposal on Monero blockchain and analyze the transaction fees required for hill climbing attacks. The results show that our design leads to a natural hindrance against these attacks that could be successful even if the templates are stored as encrypted. To the best of our knowledge, this is the first efficient blockchain-based PPBA scheme that exhibits a punishment against hill climbing attacks through transaction fees.

Smartphone-based Biometric Authentication Scheme for Access Control Management in Client-server Environment

As the information put together by the blend of smartphones, the cloud, the IOT, and ubiquitous computing continue to expand at an alarming rate, a data breach increases. Today, users' strong authentication and authorization approaches are increasingly important to secure sensitive, confidential, secret information. Possession and knowledge-based authentication techniques for computers, the internet, email accounts, etc., are commonly used to access vital information; they do not link a user to an established identity, resulting in most security vulnerabilities. Biometric authentication, on the other hand, has the privilege of being more reliable than traditional authentication as biometric characteristics of a person can’t be lost; they are tough to distribute, exchange or duplicate; and it requires the user to be present during the authentication process, thereby relating the users to established identities. Biometrics provides a higher level of assurance that the individual attempting to ascertain is the individual in question. Thus, resulting in a more reliable, usable, and cost-effective model with a higher level of protection to deter an attacker from obtaining entry to a computer or network and gaining access to confidential data. This paper introduces a novel fingerprint-based authentication scheme for mobile environments, enabling user authentication based on fingerprint features using a challenge-response-based authentication process. In this study, the proposed authentication system has been developed on a real Android-based smartphone, tested on actual users, and performance analysis has been carried out; empirical results reveal that the proposed authentication scheme achieves increased performance. Moreover, a usability analysis has been done to determine efficiency, effectiveness, and user satisfaction. The evaluation results indicate its feasibility to use it as an effective authentication mechanism for mobile phone environments.

Design of vehicle certification schemes in IoV based on blockchain

Because of a large number of vehicles in Internet of Vehicle(IoV), distributed nodes and complex driving environment, data security and certification speed are easily affected. Blockchain enables different devices that do not trust each other to work together, maintain the general state in the process of information dissemination and sharing, and protect the privacy of devices. However, at present, the speed of vehicle certification in IoV is slow, and the use of idle resources is not considered. To address this problem, this paper provides a blockchain-based vehicle identity verification scheme by using a hybrid identity code verification method to ensure the nodes in the network securely share information. Meanwhile, a task processing algorithm based on time window is proposed to optimize the utilization of idle resources. In addition, the method is evaluated by simulation experiment, and the designed scheme can reduce malicious behavior of a registered vehicle in the network, and can shorten the processing task delay.

Retraction Note to: A multimodal biometric authentication scheme based on feature fusion for improving security in cloud environment

Retraction Note to: A multimodal biometric authentication scheme based on feature fusion for improving security in cloud environment

A multi-server biometric authentication scheme based on extended chaotic map for telecare medical information system

A multi-server biometric authentication scheme based on extended chaotic map for telecare medical information system

A cancelable biometric identification scheme based on bloom filter and format-preserving encryption

Biometric based authentication systems are being prominently used everywhere. The biometric data, popularly known as a biometric template, is generally stored on the database server in its unprotected form. Unlike passwords, once compromised, biometric data can never be recovered. An ideal biometric system should provide accessibility, acceptability, availability, high security, and high biometric performance to the user. Current deployments generally relax in one or more requirements, resulting in lingering concerns about the privacy and security of individuals’ biometric data. Our proposed work introduces a cancelable biometric template protection scheme based on the format-preserving encryption and Bloom filters. The format-preserving encryption encrypts the biometric template, which then maps to the Bloom filter based template that represents the cancelable template. The use of format-preserving encryption along with Bloom filters helps to achieve the security of the input biometric template and identification with good recognition performance. We achieve 0.2% FRR at 0.01% FAR for IITD-CASIA virtual dataset in the uni-biometric scenario. A comparison with the existing schemes shows that our proposed scheme exhibits high recognition performance for both uni-biometric and multi-biometric datasets, while simultaneously, the security of the overall system is preserved.