Identity Authentication Process Research Articles

Design of a Decentralized Identifier-Based Authentication and Access Control Model for Smart Homes

In recent years, smart homes have garnered extensive attention as a prominent application scenario of IoT technology. However, the unique characteristics of smart homes have brought forth serious security threats, emphasizing the paramount importance of identity authentication and access control. The conventional centralized approach is plagued by the issue of having a “single point of failure,” while existing distributed solutions are constrained by limited device resources and the complexities of identity authentication. To tackle these challenges, this paper proposes a smart home authentication and access control model based on decentralized identifiers (DIDs). By leveraging the inherent decentralization of DIDs, which rely on blockchain, a distributed environment is constructed, effectively mitigating the problem of the “single point of failure.” In this model, every participant in the smart home system, including users and smart devices, is uniquely identified by DIDs and through the integration of an improved capability-based access control scheme, which streamlines the user identity authentication process, reduces authentication complexity, and enables convenient cross-household access with a single registration. Our experimental results demonstrate that the application of decentralized identifiers provides the model with various security attributes, including confidentiality, integrity, and traceability. Additionally, the model exhibits low time costs for each module, ensuring timely responses to access service requests and incurring lower gas consumption compared to other Ethereum-based methods. Thus, our research proposes a lightweight authentication and access control solution suitable for smart home environments.

An Anonymous and Revocable Authentication Protocol for Vehicle-to-Vehicle Communications

In the vehicular ad hoc network (VANET), the communication between the vehicle and other nodes is performed in an open channel, which puts forward the requirements for its privacy security and message integrity. Most previous protocols either frequently verify identities before accepting traffic information or do not involve identity revocation mechanisms, and they may assume that third parties are fully trusted. To further solve the above problem, a certificateless-based anonymous and revocable authentication protocol for vehicle-to-vehicle communications is proposed in this article. Our construction separates the identity authentication process from the traffic message verification, which not only avoids the disadvantage of a frequent identity revocation list (IRL) checking but also reduces the overhead in communication and message authentication. These features can make “identity authentication once, broadcast efficiency” really happen. In addition, since our authentication process is based on certificateless signature, it can resist malicious key generation centers (KGCs) and road-side units (RSUs), which is very necessary for privacy-sensitive application scenarios. Finally, the performance analyses show that our proposal is superior to the existing schemes in terms of authentication speed and communication overhead.

Issues of Clinical Identity Verification for Healthcare Applications over Mobile Terminal Platform

According to recent research, attacks on USIM cards are on the rise. In a 5G setting, attackers can also employ counterfeit USIM cards to circumvent the identity authentication of specified standard applications and steal user information. Under the assumption that the USIM can be replicated, the identity authentication process of common mobile platform applications is investigated. The identity authentication tree is generated by examining the application behavior of user login, password reset, and sensitive operations. We tested 58 typical applications in 7 categories, including social communication and personal health. We found that 29 of them only needed the SMS verification code received by the USIM card to pass the authentication. In response to this problem, it is recommended to enable two-step verification and use USIM anti-counterfeiting methods to complete the verification.

Privacy-Preserving Cloud Auditing for Multiple Users Scheme With Authorization and Traceability

With the widespread application of cloud storage, users could obtain many conveniences such as low-price data remote storage and flexible data sharing. Considering cloud service provider (CSP) is not full-trusted, lots of cloud auditing schemes are proposed to ensure the shared data security and integrity. However, existing cloud auditing schemes have some security risks, such as user identity disclosure, denial of service attack and single-manager abuse of power. To solve the above issues, we use certificateless signature technology to construct a privacy-preserving cloud auditing scheme for multiple users with authorization and traceability in this paper. Unlike the traditional schemes, our scheme realizes user identity anonymity without group signature and ring signature techniques, which guarantees the tag is compact. Meanwhile, our scheme supports that at least d managers could trace the identity of malicious user collaboratively, which avoids the abuse of single-manager power and provides non-frameability. Furthermore, we introduce an identity authentication process between the third-party auditor (TPA) and the CSP to prevent the denial of service attack. That is, our scheme could solve the problem that anyone can challenge the CSP for the proofs, which averts network congestion and waste of cloud resources. In terms of function, the proposed scheme also supports efficient user revocation from a group. Certificateless cryptography ensures that our scheme does not involve certificate management burden and the key escrow problem. The security analysis shows that our scheme is provably secure against two types of adversaries in the environment of certificateless cryptography. The performance analysis demonstrates that our scheme is efficient

A Identification and Key Establishment Scheme based on Self-Certified Public Key for MANETs

Due to the mobility of nodes, lack of infrastructure and limited computing and storage resources in mobile ad hoc networks (MANETs), this scheme uses the self-certification public key, combined with the interactive zero-knowledge proof and KEA+ key exchange method in the GPS identity authentication protocol, uses four interactions to complete the two-way identity authentication and key exchange of both parties, and which security is analyzed subsequently. The scheme effectively reduces the leakage of the claimant’s secret knowledge in the identity authentication process, and enhances the reliability of the identity authentication and key exchange process.

Research on User Identity Authentication Based on Two-way Confirmation in Data Transmission

User identity authentication is the foundation of data transmission in the complicated network environment. Moreover, the key issue is the effective identity authentication of both sides in data transmission. An authentication method for user identity based on two-way confirmation in data transmission is proposed in this paper. The public key, private key, information of traditional identity authentication, one-time transmission key, timestamp, authentication lifecycle for timestamp and other authentication elements are constructed. Based on guaranteeing the timeliness of data transmission, the two-way user identity authentication process for sending terminal and receiving terminal is set up through using the information of traditional identity authentication and one-time transmission key.

Quantum secret sharing with identity authentication based on Bell states

Quantum secret sharing techniques allow two parties or more to securely share a key, while the same number of parties or less can efficiently deduce the secret key. In this paper, we propose an authenticated quantum secret sharing protocol, where a quantum dialogue protocol is adopted to authenticate the identity of the parties. The participants simultaneously authenticate the identity of each other based on parts of a prior shared key. Moreover, the whole prior shared key can be reused for deducing the secret data. Although the proposed scheme does not significantly improve the efficiency performance, it is more secure compared to some existing quantum secret sharing scheme due to the identity authentication process. In addition, the proposed scheme can stand against participant attack, man-in-the-middle attack, impersonation attack, Trojan-horse attack as well as information leaks.

A cloud-based secure authentication (CSA) protocol suite for defense against Denial of Service (DoS) attacks

Cloud-based services have become part of our day-to-day software solutions. The identity authentication process is considered to be the main gateway to these services. As such, these gates have become increasingly susceptible to aggressive attackers, who may use Denial of Service (DoS) attacks to close these gates permanently. There are a number of authentication protocols that are strong enough to verify identities and protect traditional networked applications. However, these authentication protocols may themselves introduce DoS risks when used in cloud-based applications. This risk introduction is due to the utilization of a heavy verification process that may consume the cloud's resources and disable the application service. In this work, we propose a novel cloud-based authentication protocol suite that not only is aware of the internal DoS threats but is also capable of defending against external DoS attackers. The proposed solution uses a multilevel adaptive technique to dictate the efforts of the protocol participants. This technique is capable of identifying a legitimate user's requests and placing them at the front of the authentication process queue. The authentication process was designed in such a way that the cloud-based servers become footprint-free and completely aware of the risks of any DoS attack.

Design of a mutual authentication based on NTRUsign with a perturbation and inherent multipoint control protocol frames in an Ethernet-based passive optical network

Identity-related security issues inherently present in passive optical networks (PON) still exist in the current (1G) and next-generation (10G) Ethernet-based passive optical network (EPON) systems. We propose a mutual authentication scheme that integrates an NTRUsign digital signature algorithm with inherent multipoint control protocol (MPCP) frames over an EPON system between the optical line terminal (OLT) and optical network unit (ONU). Here, a primitive NTRUsign algorithm is significantly modified through the use of a new perturbation so that it can be effectively used for simultaneously completing signature and authentication functions on the OLT and the ONU sides. Also, in order to transmit their individual sensitive messages, which include public key, signature, and random value and so forth, to each other, we redefine three unique frames according to MPCP format frame. These generated messages can be added into the frames and delivered to each other, allowing the OLT and the ONU to go ahead with a mutual identity authentication process to verify their legal identities. Our simulation results show that this proposed scheme performs very well in resisting security attacks and has low influence on the registration efficiency to to-be-registered ONUs. A performance comparison with traditional authentication algorithms is also presented. To the best of our knowledge, no detailed design of mutual authentication in EPON can be found in the literature up to now.

Enhancement of low sampling frequency recordings for ECG biometric matching using interpolation

Electrocardiogram (ECG) based biometric matching suffers from high misclassification error with lower sampling frequency data. This situation may lead to an unreliable and vulnerable identity authentication process in high security applications. In this paper, quality enhancement techniques for ECG data with low sampling frequency has been proposed for person identification based on piecewise cubic Hermite interpolation (PCHIP) and piecewise cubic spline interpolation (SPLINE). A total of 70 ECG recordings from 4 different public ECG databases with 2 different sampling frequencies were applied for development and performance comparison purposes. An analytical method was used for feature extraction. The ECG recordings were segmented into two parts: the enrolment and recognition datasets. Three biometric matching methods, namely, Cross Correlation (CC), Percent Root-Mean-Square Deviation (PRD) and Wavelet Distance Measurement (WDM) were used for performance evaluation before and after applying interpolation techniques. Results of the experiments suggest that biometric matching with interpolated ECG data on average achieved higher matching percentage value of up to 4% for CC, 3% for PRD and 94% for WDM. These results are compared with the existing method when using ECG recordings with lower sampling frequency. Moreover, increasing the sample size from 56 to 70 subjects improves the results of the experiment by 4% for CC, 14.6% for PRD and 0.3% for WDM. Furthermore, higher classification accuracy of up to 99.1% for PCHIP and 99.2% for SPLINE with interpolated ECG data as compared of up to 97.2% without interpolation ECG data verifies the study claim that applying interpolation techniques enhances the quality of the ECG data.

Time Synchronism of Dynamic Password Status Authentication

The e-commerce transaction process customers are most worried about is the security issues. Targeted e-commerce transaction authentication security that prevail in question time synchronization based on a dynamic password authentication technology, and gives a concrete realization of identity authentication process. The main advantage of this technology is a dynamic one-time passwords, and simple operation, transmission using RSA encryption algorithm. Network Time Protocol NTP for time synchronization of standard internet protocols, to solve the difficult problem of time synchronization.

A Novel Biometric System for Identification and Verification of Haptic Users

Currently, almost all systems involve an identity authentication process before a user can access requested services such as online transactions, entrance to a secured vault, logging into a computer system, accessing laptops, secure access to buildings, etc. Therefore, authentication has become the core of any secure system, wherein most of the cases rely on identity recognition approaches. Biometric systems provide the solution to ensure that the rendered services are accessed only by a legitimate user and no one else. Biometric systems identify users based on behavioral or physiological characteristics. The advantages of such systems over traditional authentication methods, such as passwords and IDs, are well known; hence, biometric systems are gradually gaining ground in terms of usage. We investigate the issues related to the usage of haptics as a mechanism to extract behavioral features that define a biometric identifier system. In order to test this possibility, we design a haptic system in which position, velocity, force, and torque data from the instrument is continuously measured and stored as users perform a specific task. We analyze the information content of the haptic data generated directly from the instrument's interface. We then measure the physical attributes such as force and torque that provide the richest information content pertaining to a user's identity. Through a series of experimental work, we discover that haptic interfaces are more suited to verification mode rather than identification mode. Finally, we implement a biometric system based on haptics