Identity Authentication Technology Research Articles

Biometric and Geographic Information-based Identity Authentication Method

With the ongoing advancements in computer technology and mobile internet, mobile payment has become an integral component of daily life. Identity authentication technology serves as a critical measure to ensure the security of mobile payments. This paper addresses the issue of low security associated with single-factor identity authentication while highlighting the substantial overhead involved in multi-factor authentication methods. We propose a novel identity authentication method that integrates biometric data and geographic information. In this framework, the identity authentication server first performs system initialization, configures system parameters, and stores them securely. Subsequently, the identity authentication client submits an authentication request to the server and completes its registration process. Finally, the server processes this request from the client, conducts user identity verification, and returns an authentication result. This approach effectively mitigates risks posed by attackers attempting to falsify biometric data or geographic information during the identity verification process and offers robust services for biometric- and geography-based identity authentication.

An Identity Authentication Method Of Configuration Terminal Based On Audio Feature Recognition In Smart Distribution Network

Abstract A smart distribution network contains a large number of data acquisition terminals used to monitor the operation status of the distribution network and control the operation parameters, some of which are located in outdoor and other unsafe environments. If the attacker operates and configures the distribution network terminal by pretending to be a legitimate configuration device, it will become a springboard to infiltrate the main station of the internal network or misreport fault information, which may result in the leakage of sensitive data and even destroy the running state of the equipment. Identity authentication is the first line of defense to ensure the safe and stable operation of equipment. At present, the commonly used identity authentication technologies such as certificate authentication and key authentication have certain security vulnerabilities at different levels, which make it increasingly difficult to prevent the ever-changing network attack technology. According to the characteristics of physical unclonable facility (PUF), which is used to describe the hidden characteristics of the device and is directly related to the hardware, this paper proposes a method to authenticate the validity of the power distribution network configuration terminal based on the audio feature, which collects the frequency response characteristics of the hardware from the audio sensor of the configuration device as the identification information to identify the validity of the configuration device.

Microwave Heartprint: A novel non-contact human identification technology based on cardiac micro-motion detection using ultra wideband bio-radar

The existing one-time identity authentication technology cannot continuously guarantee the legitimacy of user identity during the whole human-computer interaction session, and often requires active cooperation of users, which seriously limits the availability. This study proposes a new non-contact identity recognition technology based on cardiac micro-motion detection using ultra wideband (UWB) bio-radar. After the multi-point micro-motion echoes in the range dimension of the human heart surface area were continuously detected by ultra wideband bio-radar, the two-dimensional principal component analysis (2D-PCA) was exploited to extract the compressed features of the two-dimensional image matrix, namely the distance channel-heart beat sampling point (DC-HBP) matrix, in each accurate segmented heart beat cycle for identity recognition. In the practical measurement experiment, based on the proposed multi-range-bin & 2D-PCA feature scheme along with two conventional reference feature schemes, three typical classifiers were selected as representatives to conduct the heart beat identification under two states of normal breathing and breath holding. The results showed that the multi-range-bin & 2D-PCA feature scheme proposed in this paper showed the best recognition effect. Compared with the optimal range-bin & overall heart beat feature scheme, our proposed scheme held an overall average recognition accuracy of 6.16% higher (normal respiration: 6.84%; breath holding: 5.48%). Compared with the multi-distance unit & whole heart beat feature scheme, the overall average accuracy increase was 27.42% (normal respiration: 28.63%; breath holding: 26.21%) for our proposed scheme. This study is expected to provide a new method of undisturbed, all-weather, non-contact and continuous identification for authentication.

An Analysis and Improvement Scheme for the Weakness of Kerberos V5 Authentication

The security protocol of network system can ensure the reliability of network communication. Kerberos protocol is a kind of security verification mechanism based on shared key, which has been adopted for a long time on the Internet. This text introduces the authentication process of Kerberos v5 protocol. To the defect that the authentication server don’t authenticate the user’s identity but it hold safe in building on the basis whether the user can correctly decrypt the ciphertext message in the protocol, we put forward a scheme that adding in the Challenge/Response mechanism to improve its security in Symmetric Cipher Mechanism. Passing the improved scheme’s analysis we can perceive the method that adding in Challenge/Response identity authentication technology will greatly resist Offline Password Conjecture Attack.

Analysis of security issues in mobile games

Mobile games have become a popular form of leisure and entertainment around the world. China's economy is growing as mobile games take a larger share of the country's mobile gaming landscape. Many people's efforts have gone to waste as online scammers steal their game accounts, private information, and virtual property. There are many problems in network security, such as increasing trust in fraudulent accounts; posing as an active party to swindle player information, transmission of Trojan viruses. Therefore, this paper puts forward countermeasures to these network security problems, summarizes the application of encryption technology and identity authentication technology in the transmission of personal privacy information, and proposes the use of part of the RSA encryption algorithm. So as far as it is possible to reduce the network game security problems and improve the network anti-theft system defense ability.

Design and implementation of secure and reliable information interaction architecture for digital twins

In order to improve the comprehensive defense capability of data security in digital twins (DTs), an information security interaction architecture is proposed in this paper to solve the inadequacy of data protection and transmission mechanism at present. Firstly, based on the advanced encryption standard (AES) encryption, we use the keystore to expand the traditional key, and use the digital pointer to avoid the key transmission in a wireless channel. Secondly, the identity authentication technology is adopted to ensure the data integrity, and an automatic retransmission mechanism is added for the endogenous properties of the wireless channel. Finally, the software defined radio (SDR) platform composed of universal software radio peripheral (USRP) and GNU radio is used to simulate the data interaction between the physical entity and the virtual entity. The numerical results show that the DTs architecture can guarantee the encrypted data transmitted completely and decrypted accurately with high efficiency and reliability, thus providing a basis for intelligent and secure information interaction for DTs in the future.

Voice Print Recognition Check-in System Based on Resnet

With the development of modern technology and the rise of artificial intelligence, the application scenarios of identity authentication technology are becoming more and more complex, especially the current situation of the spread of the novel coronavirus, the traditional identity authentication technology can no longer meet people's actual needs, and the society urgently needs a secure and convenient identity authentication technology. Voice print recognition technology is an identity recognition method that uses specific feature extraction methods to extract the features that can identify the speaker's identity from the original speech input, and then uses these features to identify the speaker's identity. Aiming at the above problems, this paper proposes a deep learning-based voicing recognition algorithm, which is based on the theoretical knowledge of deep learning. The research work includes the following aspects: providing convolutional network to extract features; The "speech feature template library" is established by massive training. Research on matching and recognition algorithm; Research on check-in system based on voice print recognition. Based on this algorithm, this paper designs and implements a voiceprint recognition check-in system with clear interactive interface. The system has the functions of adding members, refreshing the voice library, checking in with the voice print, clearing the results and so on. The system interface will display the data of the voice print library and the historical check-in record, as well as the current recognition results, accuracy and check-in time. The average recognition rate of the system is about 95%, which can meet the requirement of practical application.

Application of Face Recognition in E-commerce Security Authentication in the Era of Big Data

Although Internet technology brings invaluable benefits to all walks of life, the security of network and information is becoming more and more prominent. The leakage of personnel information caused by Internet security incidents causes irreparable harm and loss to individuals or enterprises. E-commerce is a virtual transaction mode based on Internet technology. Its security requirements for transactions are more stringent than those for traditional transaction modes. Traditional identity authentication technology can no longer meet its security needs. People urgently need a reliable identity authentication system, meaning to ensure the security of e-commerce. According to the actual application scenarios of the algorithm in e-commerce, this paper, based on the research on face recognition technology, focuses on the in-depth research on face detection technology under the background of big data in order to introduce face recognition technology in this paper. This paper proposes a feature-based face matching algorithm. The face image is preprocessed to improve the accuracy of real-time face detection and reduce the false detection rate. Based on the research of traditional facial feature extraction technology, a virtual sample set that can effectively support a traditional facial feature extraction algorithm is constructed to solve the problem of insufficient training samples in practical applications. The experimental results showed that the accuracy of the method in this paper can reach up to 79.5% and that the minimum time consumption is only 0.142 s. Compared with the traditional method, the accuracy rate is higher and the time consumption is shorter.

ACBM: attention-based CNN and Bi-LSTM model for continuous identity authentication

With the evolution of network attack methods, implicit continuous identity authentication technology has attracted more and more attention. Among them, keystroke dynamics is widely used because it does not need the assistance of devices other than keyboards. In this paper, we propose a keystroke dynamic identity authentication model based on deep learning. This model combines convolutional neural network (CNN), bi-directional Long Short-Term Memory (BI-LSTM), and the attention mechanism. Unlike most existing models that only use keystroke time as the feature vector, this model uses keystroke content and keystroke time as the feature vector. First, CNN is used to process feature vectors. Then the normalized vector is input into the bi-LSTM network for training. The model in this paper is tested using Buffalo open data set. The results show that FRR (False Reject Rate), FAR (False Accept Rate), and EER(Equal Error Rate) are 3.09%, 3.03%, and 4.23%, respectively. The validity and accuracy of the model in continuous identity authentication are proved.

Lattice‐based batch authentication scheme with dynamic identity revocation in VANET

Aggregate signatures allow someone to aggregate multiple signatures into one signature, which is suitable for resource-constrained and computationally inefficient environments. Identify-based aggregate signature can solve the storage problem of public key certificates while achieving efficient signature verification. However, in most of the identity-based aggregate signature schemes, the user identity revocation process is time-consuming and cannot resist quantum attacks. To solve above problems, this paper proposes a lattice-based aggregate signature scheme with dynamic identity revocation by combining lattice-based cryptography and an aggregate signature scheme. The security of the proposed lattice-based aggregate signature scheme with dynamic identity revocation has been proved in the random oracle model. In addition, the verification efficiency of the aggregate signature has been improved compared with multiple different signatures. Much of the data transfer in Vehicular Ad Hoc Network (VANET) is carried out wirelessly, which makes VANET vulnerable to identity spoofing attacks. Identity authentication technology can prevent attackers from impersonating legitimate users, thus ensuring the security of VANET. Based on the proposed lattice-based aggregate signature scheme with dynamic identity revocation, this paper proposes a lattice-based batch authentication scheme with dynamic identity revocation in VANET. Through the proposed batch authentication scheme, we can effectively resist the impersonation attack of VANET in the quantum computer environment, and the efficiency of authentication is improved.

Dynamic permission access control model based on privacy protection

Access control technology is one of the key technologies to ensure safe resource sharing. Identity authentication and authority distribution are two key technologies for access control technology to restrict unauthorized users from accessing resources, and only authorised legal users can access resources. However, user privacy protection and frequent permission changes are two thorny issues that need to be solved urgently by access control technology. In this paper, a dynamic access control model based on privacy protection is proposed to deal with these problems. Compared with existing access control technologies, the main advantages of this paper are as follows: (1) Encrypt and hide the attributes of entities, and use attribute-based identity authentication technology for identity authentication, which not only achieves the purpose of traditional identity authentication, but also ensures the attributes and privacy of entities are not leaked; (2) Binding resource access permissions with entity attributes, dynamically assigning and adjusting resource access control permissions through changes in entity attributes, making resource access control more fine-grained and more flexible. Security proof and performance analysis show that the proposed protocol is secure under the hardness assumption of the discrete logarithm problem and the decision bilinear Diffie–Hellman problem. Compared with the cited references, this model has the advantages of low computational complexity, short computational time, and low communication overhead.

Research on the effect of generative adversarial network based on wavelet transform hidden Markov model on face creation and classification

Abstract Identity authentication and identification as the main activities in the modern human daily life, in the development of social economy and technological innovation of science and technology, information security and public security and other fields of identity recognition technology put forward higher request, not only to accurately record the relevant data information, and use of advanced technology concept advanced authentication technology is put forward. Knowing the living habits of current social residents, they need to choose appropriate ways to prove their identity, whether they enter the computer system or participate in financial services. For example, passwords, keys, ID cards and other contents are traditional means of identity authentication. As the reliability of traditional identity authentication means is getting lower and lower in today’s social network environment, in order to meet the needs of increasingly innovative network platforms and enhance the security and reliability of identity authentication technology, researchers propose to use biometric identification, among which face recognition is the most common. This recognition method is more direct and effective than palmprint, retina, fingerprint and so on, and occupies an important position in the current biometric research topic. After understanding the application of hidden Markov model (HMM) based on wavelet transform and its improved model in the field of face authentication, this paper analyzes the influence of various observation vector optimization methods on the authentication probability, and proposes a dynamic threshold method combined with the authentication model, in order to obtain a better authentication probability. The final design and implementation of the face information as the core of the identity authentication system. The improved hidden Markov model can effectively represent the correlation between face organs, so it has a positive role in the application of face modeling and authentication technology.

Risk-Based Dynamic Identity Authentication Method Based on the UCON Model

With the continuous progress of computer technology, static identity authentication technology has encountered challenges in practical applications; in addition, it has deficiencies in continuity and mutability. For these reasons, we propose a risk-based dynamic identity authentication method based on the Usage Control (UCON) model. When authenticating a user, we consider their access rights based on the degree of risk, except in case of password authentication. We propose a risk assessment method, and blockchain technology is used in the scheme to provide a reliable process for risk assessment and authorization. Our scheme represents an improvement in traditional identity authentication, resulting in higher continuity and mutability. We also prove that the scheme has high security and scalability.

A Lightweight Anonymous Authentication Protocol for Resource-Constrained Devices in Internet of Things

With the rapid development of Internet of Things (IoT) in recent years, the security of IoT becomes more and more prominent. To protect data privacy and device availability, identity authentication technology has been applied to the IoT environment. However, although scholars have designed a variety of authentication protocols for the IoT environment, the resource costs of these protocols are still expensive for resource-constrained devices. In particular, when the frequent upgrade of computer hardware has led to a gradual increase in the key length of the cryptosystem, IoT devices are hard to keep up with the upgrade speed because of the balance between cost and tasks. Although the storage space has increased in recent years, the computational and communication capabilities are still limited by some physical factors, such as energy, power, and communication link bandwidth. To improve the situation, this article proposes an anonymous authentication protocol suitable for IoT devices with current hardware performance, which is based on elliptic curve and signcryption techniques. Compared to other protocols, our protocol further reduces the communication and computing cost of the client devices while ensuring security requirements. Thus, we formally prove its theoretical security under the random oracle model and use simulation experiments to verify that the protocol can effectively reduce the resource requirements.

Research on anonymous identity authentication technology in Fabric

Research on anonymous identity authentication technology in Fabric

Research on the communication mechanism between entities based on end-to-end credible state assessment

In the information age, with the development of internet technology, there are more and more various business services, at the same time, network security issues are also increasing. However, traditional protection methods are gradually hard to cope with the complex network environment. Aiming at the credible connection establishment and data communication problems that need to be solved urgently in the credible network, an interentity communication mechanism based on end-to-end credibility assessment is proposed. This mechanism combines trusted computing with network access control mechanisms, integrates network access authority control technology, server identity authentication technology, communication subject measurement technology and network link transparent encryption technology, adopts real-time monitoring of terminal status, dynamic adjustment of access authorities, optimized network access control mechanism and data transmission method, to against security issues of the network communication. After security analysis, this mechanism improves the security of the connection and communication between the terminal and the network. It can effectively avoid security threats to information systems, and make the service of the information system safe and reliable.

Research on Digital Identity Authentication Technology Based On Block Chain

In the traditional digital identity authentication, there are potential security threats caused by the user’s personal privacy data being too centralized and vulnerable to attack, and data centralization will lead to data redundancy, poor permeability, user’s lack of master control, high overall cost, and potential threats of abuse of central rights. The digital identity authentication technology based on block chain can perfectly solve the problem of appeal. The main innovative work includes the design of a new digital identity ID and a new asynchronous Byzantine fault-tolerant algorithm dsbft using cryptography, computer network, asynchronous Byzantine fault-tolerant algorithm and other technologies, Block chain is designed based on ID and dsbft, and a decentralized identity authentication system is designed based on block chain. Hash algorithm is used for signature and acceptance to improve authentication efficiency and scalability. In order to solve the dust attack and quantum computation, the elliptic curve digital signature algorithm (ECDSA) encryption algorithm can be combined with other cryptography. The results show that the appeal identity authentication scheme can resist a variety of attacks and has high efficiency and security.

Identity Authentication with Association Behavior Sequence in Machine-to-Machine Mobile Terminals

With the rapid development of machine-to-machine (M2M) mobile smart terminals, M2M services can be used in a wide range of industries, including such as tele-medicine, remote meter reading and public security. Since different industries and enterprise users have different requirements for M2M specific applications, the security identity authentication of M2M mobile terminals is particularly worthy of attention. Existing methods can effectively solve the unsustainable problem of one-time verification, however they cannot address the dynamic relevance characteristics of user behavior sufficiently. Thus, the accuracy of user identity authentication needs to be further improved. In this paper, we propose a terminal identity authentication technology based on user association behavior analysis. In order to identify the abnormal login during each behavior process of authenticated user, we take largest coincident part of the user behavior sequence and short coincide into consideration. In addition, we propose Behavior Common Subsequence Sequence Similarity Algorithm based on the traditional sequence pattern of Behavior Common Subsequence(BCS). The experimental results demonstrate that the proposed method can effectively improve the accuracy of user’s behavioral sequence, and prove the uniqueness of different sequences on the other hand.

Exploration of Core Technologies of Cyber Security

In order to study the role of key technologies in information security, the main tasks and key technologies defined in different development stages were reviewed in this paper, focusing on exploring the main tasks and core technologies of cyber security. The proof logic of PKI certification system and the digital signature standard DSA were analyzed, subsequently the signature elements are clarified and found that CPK public key could satisfy all the elements, so the evidence-based truth logic of authentication was created, and the new concepts of “identity authentication” and “proof-before-event” were formed. Based on identity authentication technology, a CPK authentication system was established, an independent self-assured network was constructed, a general one-step protocol was formulated, and a feasible technical route for cyber security was formed, and the practical significance of identification was discussed.

Access Point Authentication Scheme of SCADA System Based on Cloud Computing Technology

Aiming at the security problem of the SCADA system introduced into cloud computing that lacks a credible identity authentication mechanism, this paper proposes a cloud computing-based SCADA system access point authentication scheme. In this scheme, a cloud service security access protocol for SCADA system is proposed. The protocol uses password based identity authentication technology to screen the identity of the terminal node, and effectively identifies the illegal access point by authenticating the access point. By this method, the user’s private information is prevented from being intercepted and tampered maliciously.