Passphrase Research Articles

Method of two-factor authentication of electronic documents using enhanced encrypted non-certified digital signature with the use of security token with biometric data

The purpose of this study is to develop a method for two-factor authentication of electronic documents using an enhanced encrypted non-certified digital signature with the use of a security token with biometric data (fingerprint image). In order to achieve the goal, the method of comparative analysis was used. Existing algorithms for the electronic signature operation were studied. The method of multi-factor authentication of an electronic signature using biometric data has been studied in detail. Biometric data included: a handwritten password, an autograph, typing biometrics when typing a pass phrase, a facial image, typing biometrics when typing a free text. An external storage medium with a biometric authentication method based on a fingerprint image was also studied. Information on this media was accessed by scanning a fingerprint image. After conducting a comparative analysis and studying in detail these methods, a method for two-factor authentication of an electronic signature using a security token with biometric data was developed.

Public Key Cryptography

Public Key Cryptography is a software model that presents the process of encoding information, in this case the documents contained in a file. The encoding process begins by determining the master file or document that is ready to be encoded, then by applying the combination method, shifting and implementing the pass phrase to the contents of the document, the encoded document will be formed by Encryption function. The contents of the encoded document are then returned back with the pass phrase implementation method, shifting and combinations to form the master document again by decryption function.

USER IDENTIFICATION METHOD BY MEANS OF BIOMETRIC IMAGE OF KEYSTROKE DYNAMICS WITH DOUBLE-CHAINED REPRESENTATION

To date, more and more relevant is the task of establishing the authorship of an electronic document or typed on the keyboard text. Among the many options for solving this problem, a method based on biometric data obtained as a result of the analysis of the keystroke dynamics is highlighted. In particular, the paper considers the main parameters obtained on the basis of time stamps of keystrokes, as well as the method from the formalized doubly-chained representation. A method for identifying biometric images based on a statistical algorithm that forms a certain type of trust area within which the parameters of the identified object will be located has been described and implemented. In addition, the paper describes methods for preliminary processing of data (emission filtering, normalization and clustering), as well as their effectiveness based on the evaluation of the accuracy of crossvalidation for different values of the access threshold. Thus, in the course of practical research, a simple probabilistic algorithm was implemented to identify samples of the keyboard handwriting with a pass phrase, an estimation of the identification accuracy was made, the necessity of preliminary processing of input data for improving the quality of identification was justified. Based on the results obtained, it is further assumed that a complete biometric image of the keyboard handwriting will be formed, with further identification by arbitrary text.

Editorial Policy

Editorial Policy

Securing Data at Rest by Format Preserving Encryption Using Pass Phrase

Cryptography is important in communicating personal information that is vulnerable to distortion. The main aim of this paper is encrypting the plaintext without any modification in the format and data type. The current paper aims to implement Format Preserving Encryption (FPE) for integers particularly for credit card number. We add some additional work at the end of the AES Algorithm. The resulting cipher text is same as input plaintext. Here we apply key dependent pass phrase technique to implement FPE. For decryption pass phrase is used along with cipher text and key. The pass phrase is also used to encrypt the key. Format preserving encryption greatly reduces the modifications made in the database and queries after encryption

Three Way Authentication Protocol for Privacy Preserving and Ownership Authentication Transfer for Ubiquitous Computing Devices

Now a days almost everybody is having a portable communication device, be it a laptop, a tablet or smart phones. The user would like to have all the services at his fingertips and access them through the portable device he owns. The user would exchange data with the other user or the service provider or control the smart appliances at his home. The interactions between the user’s device and the service provider must be secure enough regardless of the type of device used to access or utilize the services. In this paper we propose a ”Three Way Authentication (TWA)” technique intended to preserve the user privacy and to accomplish ownership authentication in order to securely deliver the services to the user devices. This technique will also help the users or the service providers to check whether the device is compromised or not with the help of the encrypted pass-phrases that are being exchanged. The users use the devices to store most of the valuable information and will prove risky when the device is borrowed by the other user or when it is lost or stolen. To safeguard the user data and also to preserve user privacy we also propose the technique of Authenticated Ownership Transfer (AOT). The user who sells the device has to transfer the ownership of the device under sale. Once the ownership has been transferred, the old owner will not be able to use that device at any cost. Neither of the users will be able to use the device if the process of ownership has not been carried out properly. This also takes care of the scenario when the device has been stolen or lost, avoiding the impersonation attack. The proposed protocol has been modeled and tested with Automated Validation of Internet Security Protocols and Applications (AVISPA) and is found to be safe.

Editorial Policy

Editorial Policy

Editorial Policy

Editorial Policy

Biometrics: An Overview of the Technology, Issues and Applications

identification refers to identifying an individual based on his/her distinguishing physiological and/or behavioral characteristics. As these characteristics are distinctive to each and every person, biometric identification is more reliable and capable than the traditional token based and knowledge based technologies differentiating between an authorized and a fraudulent person. This article discusses the various biometric technologies, the advantages and disadvantages of biometric technologies, the security issues and finally the applications of various biometric technologies in day today life. 1. INTRODUCTIONthe ever-changing world of global data communications, inexpensive Internet connections, and fast-paced software development, security is becoming more and more of an issue. Hence it has become more vital to protect the critical infrastructure and provide security for the smooth functioning of the computing solutions from the attackers. One of the ways of protecting is by providing access control to the existing infrastructure. This can be achieved by providing authentication schemes such as secure login with the help of user name and password, pass phrase, smart cards, PIN numbers, biometrics, etc., A biometric system is essentially a pattern recognition system that makes use of biometric traits to recognize individuals. The objective is to establish an identity based on ‗who you are or what you produce', rather than by ‗what you possess' or ‗what you know'. The significance of using biometrics has been reinforced by the need for large scale identity management systems. The very purpose of identity management is to accurately determine an individual's identity in the context of several different applications. This new technique not only provides enhanced security but also avoids, in authentication the need to remember several passwords and maintain multiple authentication tokens.

Editorial Policy

Editorial Policy

Profiling of N-Acetylated Protein Termini Provides In-depth Insights into the N-terminal Nature of the Proteome

N-terminal processing of proteins is a process affecting a large part of the eukaryotic proteome. Although N-terminal processing is an essential process, not many large inventories are available, in particular not for human proteins. Here we show that by using dedicated mass spectrometry-based proteomics techniques it is possible to unravel N-terminal processing in a semicomprehensive way. Our multiprotease approach led to the identification of 1391 acetylated human protein N termini in HEK293 cells and revealed that the role of the penultimate position on the cleavage efficiency by the methionine aminopeptidases is essentially conserved from Escherichia coli to human. Sequence analysis and comparisons of amino acid frequencies in the data sets of experimentally derived N-acetylated peptides from Drosophila melanogaster, Saccharomyces cerevisiae, and Halobacterium salinarum showed an exceptionally higher frequency of alanine residues at the penultimate position of human proteins, whereas the penultimate position in S. cerevisiae and H. salinarum is predominantly a serine. Genome-wide comparisons revealed that this effect is not related to protein N-terminal processing but can be traced back to characteristics of the genome.

Secure Secret Recovery by using Weighted Personal Entropy

Authentication plays a vital role in many secure systems. Most of these systems require user to log in with his or her secret password or pass phrase before entering it. This is to ensure all the valuables information is kept confidential guaranteeing also its integrity and availability. However, to achieve this goal, users are required to memorize high entropy passwords or pass phrases. Unfortunately, this sometimes causes difficulty for user to remember meaningless strings of data. This paper presents a new scheme which assigns a weight to each personal question given to the user in revealing the encrypted secrets or password. Concentration of this scheme is to offer fault tolerance to users by allowing them to forget the specific password to a subset of questions and still recover the secret and achieve successful authentication. Comparison on level of security for weight-based and weightless secret recovery scheme is also discussed. The paper concludes with the few areas that requires more investigation in this research.