Means Of Authentication Research Articles

Reducing Error Rates for Iris Image using higher Contrast in Normalization process

Iris recognition system is the most secured, and faster means of identification and authentication. However, iris recognition system suffers a setback from blurring, low contrast and illumination due to low quality image which compromises the accuracy of the system. The acceptance or rejection rates of verified user depend solely on the quality of the image. In many cases, iris recognition system with low image contrast could falsely accept or reject user. Therefore this paper adopts Histogram Equalization Technique to address the problem of False Rejection Rate (FRR) and False Acceptance Rate (FAR) by enhancing the contrast of the iris image. A histogram equalization technique enhances the image quality and neutralizes the low contrast of the image at normalization stage. The experimental result shows that Histogram Equalization Technique has reduced FRR and FAR compared to the existing techniques.

Pulse-Response

Biometric characteristics are often used as a supplementary component in user authentication and identification schemes. Many biometric traits, both physiological and behavioral, offering a wider range of security and stability, have been explored. We propose a new physiological trait based on the human body’s electrical response to a square pulse signal, called pulse-response , and analyze how this biometric characteristic can be used to enhance security in the context of two example applications: (1) an additional authentication mechanism in PIN entry systems and (2) a means of continuous authentication on a secure terminal. The pulse-response biometric recognition is effective because each human body exhibits a unique response to a signal pulse applied at the palm of one hand and measured at the palm of the other. This identification mechanism integrates well with other established methods and could offer an additional layer of security, either on a continuous basis or at log-in time. We build a proof-of-concept prototype and perform experiments to assess the feasibility of pulse-response for biometric authentication. The results are very encouraging, achieving an equal error rate of 2% over a static dataset and 9% over a dataset with samples taken over several weeks. We also quantize resistance to attack by estimating individual worst-case probabilities for zero-effort impersonation in different experiments.

A Systems Security Analysis of Issuance and Verification of Birth Documents Enhanced with DNA Profiles

The use of biometrics to enhance identification has been explored and utilized to various extents. DNA is the most reliable and stable biometric that remains unchanged throughout an individual’s lifetime. Advancements in DNA analysis, in terms of reduced cost and faster processing times, make the use of DNA as a biometric more feasible over time. Since DNA data is of a sensitive nature, privacy and ethical concerns would have to be carefully considered before large-scale adoption for use in identity documents. Birth certificates are a fundamental document used by a person for identification. However, it does not contain any means of authentication beyond possession of the document. This paper examines the security measures that would be required if birth certificates were embedded with DNA profile information. The U.S. FBI CODIS approach is referred to, being an established standard for human DNA profiling and identification. Effects on the issuance and verification network for birth certificate documents are explored, in addition to the security threats.

Authentication using pulse-response biometrics

We propose a new biometric based on the human body's response to an electric square pulse signal, called pulse-response. We explore how this biometric can be used to enhance security in the context of two example applications: (1) an additional authentication mechanism in PIN entry systems, and (2) a means of continuous authentication on a secure terminal. The pulse-response biometric is effective because each human body exhibits a unique response to a signal pulse applied at the palm of one hand, and measured at the palm of the other. Using a prototype setup, we show that users can be correctly identified, with high probability, in a matter of seconds. This identification mechanism integrates well with other established methods and offers a reliable additional layer of security, either on a continuous basis or at login time. We build a proof-of-concept prototype and perform experiments to assess the feasibility of pulse-response as a practical biometric. The results are very encouraging, achieving accuracies of 100% over a static data set, and 88% over a data set with samples taken over several weeks.

Hardware implementation of a novel water marking algorithm based on phase congruency and singular value decomposition technique

The effortless accessibility of digital information and the simplicity of the digital systems have left the contents over the digital media extremely insecure. Digital watermark based information hiding is a prospective means for copyright protection, authentication, integrity verification and intellectual property right protection. Phase congruency technique works on the principle that perceptually significant image features have effect at spatial locations, where the essential Fourier components are maximally in phase with one another. An adaptive digital watermarking algorithm for better performance in multi-parametric solution space is developed here for hiding the copyright information by means of phase congruency and singular value decomposition supported information hiding technique. Performance evaluation of the algorithm is performed using simulation in Matlab in terms of Peak Signal to Noise Ratio, Structural Similarity Index Metrics, and Normalized Cross correlation index. Hardware realization up to the register transfer logic schematic level has been performed using high performance field programmable gate array board. The device utilization is 26% only, the dynamic power consumption of the circuit is 5.029mW and delay after clock is 1.539ns only. The experimental analysis establishes better robustness of the proposed algorithm as it stands against various attacks along with better data hiding capacity.

DNA authentication of animal-derived concentrated Chinese medicine granules

Concentrated Chinese medicine granules (CCMG) offer patients a convenient option for traditional therapy. However with morphological and microscopic characteristics lost, it is difficult to authenticate and control the quality of these medicinal products. This study is the first to examine the feasibility of using DNA techniques to authenticate animal-derived CCMG, which has so far lacking of effective means for authentication. Primers targeting amplicons of different sizes were designed to determine the presence of PCR-amplifiable DNA fragments in two types of CCMG, namely Zaocys and Scorpio. Species-specific primers were designed to differentiate the genuine drugs from their adulterants. The specificity of the designed primers was evaluated in crude drugs (including genuine and adulterant) and CCMG. Results showed that by using species-specific primers, DNA fragments of less than 200bp could be isolated from the CCMG and the concerned source materials. This study demonstrated the presence of small size DNA in animal-derived CCMG and the DNA is effective in species identification. The work has extended the application of DNA techniques in herbal medicine and this approach may be further developed for quality control and regulatory compliance in the CCMG industry.

"Brainprint" biometric id hits 100% accuracy [News

Psychologists and engineers at Binghamton University in New York say they've hit a milestone in the quest to use the unassailable inner workings of the mind as a form of biometric identification. They came up with an electroencephalograph system that proved 100 percent accurate at identifying individuals by the way their brains responded to a series of images. But EEG as a practical means of authentication is still far off.

An empirical study on iris recognition in a mobile phone

The iris recognition on a mobile phone is different from the conventional iris recognition implemented on a dedicated device in that the computational power of a mobile phone and the space for placing NIR (near infrared) LED (light emitting diode) illuminators and iris camera are limited. This paper raises these issues in detail based on real implementation of an iris recognition system in a mobile phone and proposes some solutions to these issues. An experimental study was conducted to search for the relevant power and wavelength of NIR LED illuminators with their positioning on a phone for capturing a good quality iris image. Subsequently, in view of the disparity between the user's gazing point and the center of the iris camera which causes degradation of acquired iris images, an experiment was performed to locate the appropriate gazing point for good iris image capture. A fast eye detection algorithm was proposed for implementation under the mobile platform with low computational facility. The experiments were conducted on a currently released mobile phone and the results showed promising potential for adoption of iris recognition as a reliable authentication means. As a result, two 850nm LEDs were selected for iris illumination at 1.1cm away from the iris camera for the size of a 7cm × 13.7cm phone. In the performance, the recognition accuracy was 0.1% EER (equal error rate) and the eye detection rate with the speed of 17.64ms on a mobile phone was 99.4%.

Nondestructive estimation of growth year in ginseng cultivars using the means of mathematical modeling on the basis of allometry.

Growth-year authentication has extraordinary significance for plant growth, structure and development research, and has a wide range of applications in value assessment of economic crops. Panax ginseng is the most commonly used medicinal plant in Asian countries. The fix number of growth-year is an important quality evaluation which is difficult to be obtained accurately in current technical conditions. Preliminary authentication theory for growth-year has been described in previous studies using a short-lived perennial medicinal plant (Paeonia lactiflora pall.) as the research material. In this research, we focused on the growth-year estimation in ginseng cultivars, and attempt to explore the age estimation method for vascular plants according to mathematical simulation of the root structure development. Micro data was obtained from 204 individuals of 3 different kinds of ginseng cultivars, which have a series of gradient age and a clear growth record. Outer diameter of the vascular cambium (b) and the radius of cross section (r) were measured with ordinary stereo microscope. We further designed and established two different kinds of authentication model based on the taproot structure development for growth year authentication (P =β*M-α and M = K*X1 (a) (1) X2 (a) (2) ). Moreover, the models were applied to identify the growth year of ginseng without damage using Micro-CT or DEI reconstruction. A potential method, have been recently described, the age of ginseng can be analyzed by telomere length and telomerase activity. However, we found that there are different results indicated in other species. We concluded that microscopic methods perceived currently were provided a more effective means for growth-year authentication.

Perception Based Decision Support System for Handwriting Behaviour Analysis

Handwritten text is potentially the most powerful and conventional means of personal authentication in Human Computer Interaction, with applications to be found in document analysis, deception detection, banking and many other areas. Handwriting is a complex perceptual motor task generating linguistic information. Characters reflect shape distinction needed to perceive different phonetic information of words. In this paper, we have tried to emphasize the role of perception and cognition in identifying unique characteristics of handwriting of any person to screen out deceptive and true statements as a computational model in the areas of Pattern Recognition and Human Computer Interaction. The paper reports the prototype development of a decision support system based on handwriting behavior analysis.

Face Recognition and Template Protection with Shielding Function

Biometric authentication is the use of unique human features to provide a secure, reliable and convenient access to an environment or a computer system. However, there are numerous security and privacy concerns associated with the use of biometrics as a means of authentication. Unprotected biometric data can be used by an impostor to impersonate legitimate uses, to violate their privacy and steal their identity. This paper proposes a simplified, secure and privacy-preserving authentication scheme for face biometric based on modified shielding function. The modified shielding function is a simplified version of the generic shielding function which does not require additional preprocessing steps of quantization and reliable bit selection. Rotation invariant neighbour-based local binary pattern (RINLBP) is used to extract fixed length binary features directly from pre-processed face images. RINLBP is simple to calculate and has good performance. It is also robust against changes in illumination and image rotation. Concatenated error correction technique is used to address errors due to noise and intraclass variation. The concatenated technique corrects errors both block and bit errors in contrast to the generic shielding function in which only bit level errors are corrected. Results of experiments based on 200 face images obtained from the CASIA near infrared face database show a false acceptance rate of 0.47% and a false rejection rate of 1.56%. Our scheme has a key length of 120 bits, which is higher than the minimum requirement of 50 bits for biometric keys. It also has a large key space and entropy which makes it less susceptible to guessing attack (Pr =0.008).

Two Way Authentication for Web Servicesusing Video CAPTCHA and Kerberos

With growing use of internet and its services, a large number of organizations are making use of password to provide security. The password is most convenient means of authentication. But now a day’s password becomes hacked by the attacker. To provide more security, we are using Kerberos and the video CAPTCHA as authentication technique. Kerberos is a authentication protocol and CAPTCHA is a (Completely Automated Public Turing Test to tell Computer and Human Apart) test which provide a way to differentiate user into a human and malicious program. CAPTCHA become the most widely used standard security technique to prevent automated computer program attack. Our aim is to proposed a system which can be a better than existing CAPTCHA and provide higher level of authentication.

Dog blogs as ventriloquism: Authentication of the human voice

This paper looks at personal blogging by dog owners in an international, English language blogsite in which dog owners from around the world report and reflect upon their dogs and their lives with dogs, and do so by using the dog׳s voice. It approaches dog blogs as an example of the strategic use of pervasive but contentious anthropomorphic western discourses about animals and discusses how dog bloggers use anthropomorphism as a discursive means for crafting and collectively ratifying authenticity in a translocal, interest-driven and informal social media context in which traditional territorial and demographic parameters of authenticity are not easily available or relevant.More specifically, the paper shows how the discursive means for authentication in dog blogging entail deliberate acts of ventriloquism and stylization. It analyses the ways in which these function to authenticate bloggers socially and morally as legitimate participants in dog blogging and as particular kinds of persons. Further, it discusses how a range of norms associated with blogging, on the one hand, and historically specific discourses about humans and companion animals, on the other hand, are recontextualized for the purposes of the socio-cultural niche in question. Particular attention is paid to how linguistic and discursive features associated with diary writing, as well as to how western discourses of dogs and animals are mobilized in the establishment, maintenance and regulation of the global practice about dogs in a way that is highly indexical of idealized, classed gender.

A Dynamic Security Protocol for Face Recognition Systems Using Seismic Waves

Face recognition system is one of the robust means of authentication. It involves comparing the faces of an individual against a set of images in the training database. Thus the security issues pertaining to the training database is very critical. This paper aims at providing security to the images in the training database by empowering the encryption algorithms using a secure Random Number Generator (RNG). To facilitate this, the seismic waves are used as seeds to drive the PseudoRandom Number Generators (PRNGs). The efficiency of seismic waves as a True Random Number Generator (TRNG) was evaluated using two statistical suites. Also, the proposed TRNG is compared against other existing RNGs. It was found that the degree of randomness rendered by the proposed system was in good agreement like the other existing generators. The proposed system was found to be cost-effective, portable and easy to maintain.

Survey of Strong Authentication Approaches for Mobile Proximity and Remote Wallet Applications - Challenges and Evolution

may be described as container application used for configuring, accessing and analysing data from underlying payment application(s). There are two dominant types of digital wallet applications, proximity wallet and remote wallet. In the payment industry, one often hears about authentication approach for proximity or remote wallets or the underlying payment applications separately, but there is no such approach, as per our knowledge, for combined wallet, the holder application. While Secure Element (SE) controlled by the mobile network operator (i.e., SIM card) may ensure strong authentication, it introduces strong dependencies among business partners in payments and hence is not getting fraction. Embedded SE in the form of trusted execution environment (3, 4, 5) or trusted computing (24) may address this issue in future. But such devices tend to be a bit expensive and are not abundant in the market. Meanwhile, for many years, context based authentication involving device fingerprinting and other contextual information for conditional multi-factor authentication, would prevail and would remain as the most dominant and strong authentication mechanism for mobile devices from various vendors in different capability and price ranges. EMVCo payment token standard published in 2014 tries to address security of wallet based payment in a general way. The authors believe that it is quite likely that EMVCo payment token implementations would evolve in course of time in such a way that token service providers would start insisting on device fingerprinting as strong means of authentication before issuing one-time-use payment token. This paper talks about challenges of existing authentication mechanisms used in payment and wallet applications, and their evolution.

얼굴 인증을 이용한 무인 접수 로봇 개발

다양한 개인 정보의 활용으로 신뢰할 수 있는 인증 수단이 요구되고 있다. 개인 얼굴의 특징을 이용하는 얼굴 인증 기술은 특징점 추출이 용이하여 많이 활용되고 있다. 본 논문에서는 무인 접수를 위한 얼굴인증 로봇을 구현하였다. 구현된 로봇은 사용자 인증을 위해 얼굴인식방법을 이용한여 개인 인증을 하고 있다. 얼굴인증 시스템을 무인접수로봇에 적용하여 유용함을 보였다. As personal information is utilized as an important user authentication means, a trustable certification means is being required. The face identification technology using characteristics of the personal face among several biometrics technologies is easy in extracting features. In this paper, we implement a face identification robot for unattended reception. The robot is performed by face identification. To assess the effectiveness of the robot, it was tested and experimental results show that the proposed method is applicable for unattended reception interface.

Security Analysis and Performance Evaluation of an Enhanced Two-Factor Authenticated Scheme

Various security attacks may cause unauthorized access, misuse, modification, or denial of a computer network and network accessible resources. To prevent these attacks various authentication means can be used to provide authenticated key exchange protocols. Authenticated key exchange protocol allows the exchange of session key and also authenticates the identities of parties involved in the key exchange. It mathematically binds the agreed key to other agreed upon data such as shared secret keys, passwords and public/private key pairs. The reliability and security of the authentication protocol can be increased by combining two factors in the same authentication protocol. Many two-factor authenticated schemes have been proposed due to its usefulness. The main focus of this paper is to propose an enhanced two-factor authenticated scheme that can resist various security attacks in network by eliminating the attack races by matching it with knowledge available in the network as well as provide user anonymity.

THE PROBLEMS OF INFORMATION DEFENCE IN DIAGNOSIS INTELLIGENT SYSTEMS OF MICROPROCESSOR DEVICES

The method for protection of diagnosis intelligent system of microprocessor devices is represented in the paper. This method based on background authentication of the user in the process of keyboarding. The user’s keystroke dynamics characteristics are the means of authentication. For realization of the user authentication method uses the artificial neural networks of ART2 architecture.

The evolution of identity management using the example of web-based applications

Abstract The typical identity management (IdM) techniques used in web-based applications are about to change from application-specific means for identification, authentication and authorization towards the support of standardized, secure and privacy friendly mechanisms for Single Sign-On (SSO). In this paper we outline the different phases of this evolution, which started with the introduction of standardized interfaces for authentication and authorization and allowed to shift these sensitive tasks from the application towards the web application server. In a second phase the interfaces were extended to support authentication and authorization in distributed systems and feature SSO-techniques. The third phase adds identification and aims at providing more security for distributed authentication infrastructures and finally there is a trend towards providing more privacy friendly mechanisms for identity management in the future.

Issues in user authentication using security questions

Security questions are a human-authentication method leveraging unique private knowledge that only the valid user has and provide a reliable means for supplementary authentication. Security questions offer a low-cost alternative for password-resets and provide an additional layer of security beyond the traditional username-and-password protection method. In this survey paper, we review current literature on security questions, examine the issues on their use and identify the areas that need further research. The results of our review indicate that the current literature has acknowledged and discussed how security questions are susceptible to predominantly three types of attacks: blind guess, focused guess and observation. We found gaps in the literature in areas of using automated systems to provide real-time evaluation of responses and providing feedback to users to improve security. Finally, we outline potential directions for future research in using security questions more effectively.