Remote Authentication Research Articles

Strong Authentication Scheme Based on Hand Geometry and Smart Card Factors

In 2009, Xu et al. presented a safe, dynamic, id-based on remote user authentication method that has several advantages such as freely chosen passwords and mutual authentication. In this paper, we review the Xu–Zhu–Feng scheme and indicate many shortcomings in their scheme. Impersonation attacks and insider attacks could be effective. To overcome these drawbacks, we propose a secure biometric-based remote authentication scheme using biometric characteristics of hand-geometry, which is aimed at withstanding well-known attacks and achieving good performance. Furthermore, our work contains many crucial merits such as mutual authentication, user anonymity, freely chosen passwords, secure password changes, session key agreements, revocation by using personal biometrics, and does not need extra device or software for hand geometry in the login phase. Additionally, our scheme is highly efficient and withstands existing known attacks like password guessing, server impersonation, insider attacks, denial of service (DOS) attacks, replay attacks, and parallel-session attacks. Compared with the other related schemes, our work is powerful both in communications and computation costs.

Biometric template extraction from a heartbeat signal captured from fingers

Authentication of remote users is very important for security and privacy of multimedia content that is often accessed online. Heartbeat signal has emerged as biometric modality suitable for remote authentication for its privacy and liveness property. In order to improve acceptability of this modality, we propose a method of biometric template extraction from a heartbeat signal captured from fingers. An unsupervised outlier detection method is employed to select the most regular heartbeats from a specimen. In order to mitigate the effect of heart rate variability (HRV), morphology of the selected heartbeat is aligned by a piecewise-uniform method. Then, a template is formed by averaging aligned heartbeats and presented in a lower dimensional space by the principal component analysis. Authentication performance of the template was evaluated using a database collected from 112 individuals in multiple sessions by a handheld ECG device. We also implemented four state-of-the-art templates and tested them by the same database. Experimental results indicate that authentication performance of the proposed template is superior to those of any of these templates. It is also suitable for remote authentication using mobile computing devices for its computational efficiency and compactness.

Development of Multi-Level Speech based Person Authentication System

This work presents the development of a multi-level speech based person authentication system with attendance as an application. The multi-level system consists of three different modules of speaker verification, namely voice-password, text-dependent and text-independent speaker verification. The three speaker verification modules are combined in a sequential manner to develop a multi-level framework which is ported over a telephone network through interactive voice response (IVR) system for aiding remote authentication. The users call from a fixed set of mobile handsets to verify their claim against their respective models, which is then authenticated in a multi-level mode using the above stated three modules. An analysis over a period of two months is shown on the performance of the multi-level system in attendance marking. The multi-level framework having combination of the three modules helps in achieving better performance than that of the individual modules, which shows its potential for practical deployment.

Sistem Autentikasi Hotspot Menggunakan LDAP dan Radius pada Jaringan Internet Wireless Prodi Teknik Sistem Komputer

Wireless network is a network utilizing radio waves that propagate openly. This network requires security to simplify the process by using user Authentication. One of technology that could be used in order to make it safer is a Lightweight Directory Access Protocol (LDAP) and Remote Authentication Dila In User Service (RADIUS). Computer Systems Engineering Department is one of the study program in the Faculty of Engineering, University of Diponegoro that reserve the internet service everyday for students need. However, internet wireless network in this department is not yet safe enough,for the necessary to secure it’s need creating a security system with LDAP and RADIUS.The results of this study is a network authentication server using OpenLDAP and FreeRadius Hotspot that will be integrated with an account of Academic Information System, which is implemented on Prodi Computer Systems Engineering Department of the University of Diponegoro.

SecAuthn: Provably Secure Multi-Factor Authentication for the Cloud Computing Systems

Cloud computing is an advanced resource pooling framework which delivers an economical and more reliable Information and Communications Technology (ICT) solutions to the industry and academia. Cloud technology helps the stakeholders to avoid initial investment of costly infrastructure setup, licensing new software’s, training new personals and operational cost. Therefore, all size of IT organizations and individuals can make use of the cloud for boosting up their ICT needs. In parallel there has been backlash due to authentication access keys and credentials management issues in this new framework. As a result, in this article we have proposed a robust and privacy preserved Multi-Factor Authentication (MFA) scheme with efficient access keys distribution mechanism. The proposed MFA approach integrates the bio-metric fingerprint with user-id, password and One-Time Password (OTP) and upgrades the existing Single Sign-On (SSO) and two-factor authentications to multi-factor authentication. Our investigation not only provides the robust remote authentication in cloud but also preserves the privacy of the authentication credentials. The main shortcoming in our approach is that remote users and cloud service providers must trust the third party trustee. We have analyzed the completeness of our investigation using the GNY (Gong, Needham and Yahalom) logic. Finally, we reported the performance and robustness of our scheme with series of experiments.

Lightweight Communication Overhead Authentication Scheme Using Smart Card

<p>Authentication takes its place to grant authorized user a remote access to certain online resources. As well, prevent unauthorized user from accessing that resources. Unforyunatly most of authentication schemes consider only security factors without taking in consideration the communication resources required. Recently, Li et. al. proposed an enhanced smart card based remote user password authentication scheme. We analyzed their scheme and we pointed out that, their scheme required high communication overhead. Furthermore, their scheme suffer from forgery, user impersonation and server impersonation attacks. Through this paper to address aforesaid weaknesses, we propose a Lightweight communication overhead authentication scheme using smart card. The security and performance analysis shows that, our proposed scheme is lightweight communication and computation cost as well secure and can withstand wide spectrum of malicious attacks, like forgery, insider, replay and stolen smart card attack. Besides, our scheme encompasses desired security attributes. Therefore, it is suitable for practical use compared to other related scheme. </p>

Remote Service Access using Biometrics

Background/Objectives: The main objective of the proposed work is to get the permission for accessing element through remote authentication by hiding encrypted biometric signal within image of the user. Methods/Statistical Analysis: The biometric signal is encrypted using Arnold transform algorithm and hided into the cover image with Qualified Significant Wavelet Tree (QSWT). The image of the person is denoted as cover image. The Compressed cover image gets transmitted over wireless channel for remote authentication. The Inverse Wavelet Transform is used to separate encrypted signal and the cover image. The biometric signal gets decrypted by inverse Arnold transformation algorithm. Findings: The Arnold transform algorithm increases the Normalized Cross Corelation (NCC) value for normalizing the image in order to improve the quality of reconstructed image. Hence, the Mean Square Error (MSE) is decreased and Peak Signal to Noise Ratio (PSNR) value is increased in the proposed work. And so the error is minimized in the proposed system compared to the existing techniques. The problems identified in the existing systems such as data loss, complexity and accuracy in biometric signal has been overcome by the proposed system. Application/Improvements: The proposed system can be used in military purposes for sharing confidential data. The data can be accessed over remote areas in secured maner.

Remote Authentication via Biometrics: A Robust Video-Object Steganographic Mechanism Over Wireless Networks

In wireless communications, sensitive information is frequently exchanged, requiring remote authentication. Remote authentication involves the submission of encrypted information, along with visual and audio cues (facial images/videos, human voice, and so on). Nevertheless, Trojan horse and other attacks can cause serious problems, especially in the cases of remote examinations (in remote studying) or interviewing (for personnel hiring). This paper proposes a robust authentication mechanism based on semantic segmentation, chaotic encryption, and data hiding. Assuming that user X wants to be remotely authenticated, initially X’s video object (VO) is automatically segmented, using a head-and-body detector. Next, one of X’s biometric signals is encrypted by a chaotic cipher. Afterwards, the encrypted signal is inserted to the most significant wavelet coefficients of the VO, using its qualified significant wavelet trees (QSWTs). QSWTs provide both invisibility and significant resistance against lossy transmission and compression, conditions that are typical of wireless networks. Finally, the inverse discrete wavelet transform is applied to provide the stego-object. Experimental results regarding: 1) security merits of the proposed encryption scheme; 2) robustness to steganalytic attacks, to various transmission losses and JPEG compression ratios; and 3) bandwidth efficiency measures indicate the promising performance of the proposed biometrics-based authentication scheme.

Neuroscience Gateway � Cyberinfrastructure Providing Supercomputing Resources for Large Scale Computational Neuroscience Research

Neuroscience Gateway � Cyberinfrastructure Providing Supercomputing Resources for Large Scale Computational Neuroscience Research

Remote Login Authentication Scheme based on Bilinear Pairing and Fingerprint

The bilinear pairing, also known as Weil pairing or Tate pairing, is widely used in cryptography and its properties help to construct cryptographic schemes for different applications in which the security of the transmitted data is a major concern. In remote login authentication schemes, there are two major requirements: i) proving the identity of a user and the server for legitimacy without exposing their private keys and ii) freedom for a user to choose and change his password (private key) efficiently. Most of the existing methods based on the bilinear property have some security breaches due to the lack of features and the design issues. In this paper, we develop a new scheme using the bilinear property of an elliptic point and the biometric characteristics. Our method provides many features along with three major goals. a) Checking the correctness of the password before sending the authentication message, which prevents the wastage of communication cost; b) Efficient password change phase in which the user is asked to give a new password after checking the correctness of the current password without involving the server; c) User anonymity - enforcing the suitability of our scheme for applications in which a user does not want to disclose his identity. We use BAN logic to ensure the mutual authentication and session key agreement properties. The paper provides informal security analysis to illustrate that our scheme resists all the security attacks. Furthermore, we use the AVISPA tool for formal security verification of our scheme.

Robust Remote Mutual Authentication Scheme with Key Agreement

In 2006, Shieh and Wang proposed a remote mutual authentication and key agreement scheme, in which a user can login to a remote server with his password and smartcard. In Shieh and Wang’s scheme, it requires only hash functions operations during the login and key agreement phase. However, Holbl et al. demonstrated some attacks on Shieh and Wang’s scheme and proposed an improved scheme to overcome the shown attacks in 2010. In this paper, we point out that Holbl et al.’s proposed scheme is still vulnerable to an offline password guessing and forgery attack. In addition, Holbl et al.’s scheme fails to achieve explicit key authentication. We propose a robust remote mutual authentication scheme with key agreement to resist against above mentioned attacks and provide more security requirements.

Spectral shifting of speaker‐specific information for narrow band telephonic speaker recognition

Speech-based authentication system can perform remote authentication over telephone channels. However, telephone channels are restricted to a bandwidth of ∼0–4 kHz while studies on the distribution of speaker-specific information in the speech spectrum strongly suggests that useful speaker-specific information is present above 4 kHz. A method to shift a part of this speaker-specific information above 4 kHz into the telephone bandwidth in place of less speaker-specific information originally present below 4 kHz is proposed. Speaker recognition experiments conducted using the proposed method leads to ∼18.5% relative improvement on equal error rate when compared to a system using the conventional telephone band speech, as evaluated on the Intelligence Advanced Research Projects Activity (IARPA) Babel Program Tamil language collection.

Cryptanalysis of a Smart Card-Based Remote Authentication Scheme with Anonymity

Cryptanalysis of a Smart Card-Based Remote Authentication Scheme with Anonymity

Cryptanalysis and an Improvement of New Remote Mutual Authentication Scheme using Smart Cards

In this paper, the security of a remote user mutual authentication scheme using smart cards proposed by Rajaram et al., [Rajaram R, Amutha Prabakar M, New Remote Mutual Authentication Scheme using Smart Cards, Transactions on Data Privacy, 2(2009): 141--152] is analysed. We show that Rajaram et al., scheme is still vulnerable to user impersonation attacks, off-line password guessing attacks and time synchronization problem. Moreover, the scheme does not provide an option to change or update the password and efficient login, and lacks proper mutual authentication. We also propose a password-based remote user mutual authentication scheme which provides the remedy for the vulnerabilities of Rajaram et al., scheme. Furthermore, performance analysis shows that compared with Rajaram et al., authentication scheme, our proposed scheme is simple and secure.

Revocable and Scalable Certificateless Remote Authentication Protocol With Anonymity for Wireless Body Area Networks

To ensure the security and privacy of the patient's health status in the wireless body area networks (WBANs), it is critical to secure the extra-body communication between the smart portable device held by the WBAN client and the application providers, such as the hospital, physician or medical staff. Based on certificateless cryptography, this paper proposes a remote authentication protocol featured with nonrepudiation, client anonymity, key escrow resistance, and revocability for extra-body communication in the WBANs. First, we present a certificateless encryption scheme and a certificateless signature scheme with efficient revocation against short-term key exposure, which we believe are of independent interest. Then, a certificateless anonymous remote authentication with revocation is constructed by incorporating the proposed encryption scheme and signature scheme. Our revocation mechanism is highly scalable, which is especially suitable for the large-scale WBANs, in the sense that the key-update overhead on the side of trusted party increased logarithmically in the number of users. As far as we know, this is the first time considering the revocation functionality of anonymous remote authentication for the WBANs. Both theoretic analysis and experimental simulations show that the proposed authentication protocol is provably secure in the random oracle model and highly practical.

Heartbeat Biometrics for Remote Authentication Using Sensor Embedded Computing Devices

Biometric verification has been included in remote user authentication schemes recently. In this paper, we have proposed the use of heartbeat biometrics for its liveness property as a possible defense against spoof attacks in remote authentication. Sensor embedded mobile computing devices such as smart phones could be used to capture biometric signals and to replace the use of traditional smart cards. For the remote authentication, we have adopted the state-of-the-art scheme. We have described the biometric verification method instead of using cryptographic hash function for feature matching. We have used the piecewise aligned morphology (PAM) of heartbeat signal as a biometric feature. The biometric verification method was tested with ECG records of 100 individuals and 1.34% of equal error rate (EER) was obtained. This feature could be computed and transmitted efficiently using mobile computing devices. The proposed scheme offers more security and convenience to users. Additionally, it becomes robust against noisy biometric input. The proposed scheme should be feasible for remote authentication using sensor embedded computing devices in many practical applications such as remote healthcare.

Cryptanalysis of Ahirwal-Sonwanshi ID-Based Remote User Authentication Scheme

Due to the rapid growth of computer and communication technologies, people obtain variety of online services quickly. However, all networks are vulnerable to lots of security threats and attacks. The remote authentication scheme provides an efficient method to validate the remote users and servers. Ahirwal and Sonwanshi proposed a remote user authentication scheme with smart card in 2012. They indicated that Song’s smart card based password authentication protocol cannot resist the offline password guessing attack, insider attack, forward secrecy and denial of service attack. They proposed an ID-based authentication scheme to fix security flaws. The scheme uses one-way hash function and bitwise XOR operation such that the computation complexity is very low. However, in this article, we will show that their scheme cannot withstand the offline password guessing attack as they declared. An adversary can use the intercepted messages of two login sessions to obtain the password.

A novel authentication scheme using self-certified public keys for telecare medical information systems.

Telecare medical information systems (TMIS), with the explosive growth of communication technology and physiological monitoring devices, are applied increasingly to enable and support healthcare delivery services. In order to safeguard patients' privacy and tackle the illegal access, authentication schemes for TMIS have been investigated and designed by many researchers. Many of them are promising for adoption in practice, nevertheless, they still have security flaws. In this paper, we propose a novel remote authentication scheme for TMIS using self-certified public keys, which is formally secure in the ID-mBJM model. Besides, the proposed scheme has better computational efficiency. Compared to the related schemes, our protocol is more practical for telemedicine system.

A novel and provably secure biometrics-based three-factor remote authentication scheme for mobile client–server networks

The biometrics, the password and the storage device are the elements of the three-factor authentication. In 2013, Yeh et al. proposed a three-factor user authentication scheme based on elliptic curve cryptography. However, we find that it has weaknesses including useless user identity, ambiguous process, no session key and no mutual authentication. Also, it cannot resist the user forgery attack and the server spoofing attack. Moreover, Khan et al. propose a fingerprint-based remote authentication scheme with mobile devices. Unfortunately it cannot withstand the user impersonation attack and the De-synchronization attack. Furthermore, the user’s identity cannot be anonymous, either. To overcome the disadvantages, we propose a new three-factor remote authentication scheme and give a formal proof with strong forward security. It could provide the user’s privacy and is secure. Compared to some recent three-factor authentication schemes, our scheme is secure and practical.

An enhanced biometric-based authentication scheme for telecare medicine information systems using elliptic curve cryptosystem.

The telecare medical information systems (TMISs) enable patients to conveniently enjoy telecare services at home. The protection of patient’s privacy is a key issue due to the openness of communication environment. Authentication as a typical approach is adopted to guarantee confidential and authorized interaction between the patient and remote server. In order to achieve the goals, numerous remote authentication schemes based on cryptography have been presented. Recently, Arshad et al.(J Med Syst 38(12): 2014) presented a secure and efficient three-factor authenticated key exchange scheme to remedy the weaknesses of Tan et al.’s scheme (J Med Syst 38(3): 2014). In this paper, we found that once a successful off-line password attack that results in an adversary could impersonate any user of the system in Arshad et al.’s scheme. In order to thwart these security attacks, an enhanced biometric and smart card based remote authentication scheme for TMISs is proposed. In addition, the BAN logic is applied to demonstrate the completeness of the enhanced scheme. Security and performance analyses show that our enhanced scheme satisfies more security properties and less computational cost compared with previously proposed schemes.