Secure Authentication Process Research Articles

OPTIMIZING AUTHENTICATION SECURITY IN INTELLIGENT SYSTEMS THROUGH VISUAL BIOMETRICS FOR ENHANCED EFFICIENCY

Context. The primary objective of this article is to explore aspects related to ensuring security and enhancing the efficiency of authentication processes in intelligent systems through the application of visual biometrics. The focus is on advancing and refining authentication systems by employing sophisticated biometric identification methods. Objective. A specialized intelligent system has been developed, utilizing a Siamese neural network to establish secure user authentication within the existing system. Beyond incorporating fundamental security measures such as hashing and secure storage of user credentials, the contemporary significance of implementing two-factor authentication is underscored. This approach significantly fortifies user data protection, thwarting most contemporary hacking methods and safeguarding against data breaches. The study acknowledges certain limitations in its approach, possibly affecting the generalizability of the findings. These limitations provide avenues for future research and exploration, contributing to the ongoing evolution of authentication methodologies in intelligent systems. Method. The two-factor authentication system integrates facial recognition technology, employing visual biometrics for heightened security compared to alternative two-factor authentication methods. Various implementations of the Siamese neural network, utilizing Contrastive loss function and Triplet loss function, were evaluated. Subsequently, a neural network employing the Triplet loss function was implemented and trained. Results. The article emphasizes the practical implications of the developed intelligent system, showcasing its effectiveness in minimizing the risk of unauthorized access to user accounts. The integration of contemporary authentication methodologies ensures a secure and robust user authentication process. Conclusions. The implementation of facial recognition technology in authentication processes has broader social implications. It contributes to a more secure digital environment by preventing unauthorized access, ultimately safeguarding user privacy and data. The study’s originality lies in its innovative approach to authentication, utilizing visual biometrics within a Siamese neural network framework. The developed intelligent system represents a valuable contribution to the field, offering an effective and contemporary solution to user authentication challenges.

Candidate Authentication using OCR Techniques

This paper explores the application of Optical Character Recognition (OCR) techniques for authenticating candidates based on identity documents. As advancements in technology continue to redefine various industries, the integration of OCR into candidate authentication processes offers a streamlined and efficient solution. The aim is to design a system which gets the image of the identity proof and the details are being retrieved using the character segmentation which is done by a feature extraction optical character recognition algorithm (OCR). The authentication process encompasses document validation and implementation of security measures to safeguard against fraud.By combining YOLO object detection, Optical Character Recognition (OCR) and fuzzy matching technique ,this approach aims to enhance the accuracy and reliability of candidate authentication. This underscores the importance of a comprehensive authentication framework, incorporating both technological and procedural elements, to establish a robust and secure candidate authentication process in diverse contexts. Keywords: ID Verification,Optical Character Recognition (OCR), Text Extraction, YOLO,Object Detection,Image Segmentation, EasyOCR , Fuzzy Matching.

A secured image based three factor user authentication system

Graphical User Authentication (GUA) is an image-based password system that leverages the human tendency to remember visuals more effectively. This methodology enables users to effortlessly generate and recall passwords. The three important parameters for any graphical based password system are Usability, Randomness and Security. Usability deals with the system adaptability, memorability, flexibility, User satisfaction etc. On the other side randomness is about Hotspot Coverage, Click Point Clustering, Spatial Patterns, J-statistics etc. This paper is an attempt to initially develop an image-based authentication system that is usable, venerable in terms of randomness. In addition, it is necessary to build a strong security authentication process where the attackers are unable to access the system. The past research study claims the diversity between the usability and security aspect. The focus of this research study is to analyze the impact of various security attacks on the proposed system and the possible solution to avoid them.

Revolutionizing Authentication: Google Passkeys Technology

In the ever-evolving landscape of digital security, the traditional methods of authentication are facing increasing challenges in safeguarding sensitive information and user privacy. Google Passkeys technology emerges as a pioneering solution poised to redefine the way users access their accounts and protect their digital identities. This abstract delves into the innovation of Google Passkeys technology, exploring its fundamental principles and potential impact. Passkeys represent a paradigm shift in authentication by eliminating the need for passwords, which have long been susceptible to breaches and often result in user frustration. Instead, Passkeys harness cutting-edge cryptographic techniques to create a seamless and secure authentication process. At its core, Google Passkeys rely on a unique combination of hardware-based security keys and advanced cryptographic algorithms. Users are equipped with physical security keys, such as USB tokens or smartphones with built-in security features, which act as the "key" to their digital identities. These keys, paired with secure communication protocols, provide a multifaceted approach to authentication that significantly enhances security.

Secure Authentication Process with Intruder Detection and Reporting Mechanism

Abstract—The implementation of robust authentication mechanisms is essential for ensuring the security of sensitive systems and preventing unauthorized access. This research paper presents a novel approach to enhance the authentication process by incorporating an intruder detection and reporting mechanism. The proposed system captures the image of an individual attempting unauthorized access after multiple failed login attempts and sends it to the administrator using the Twilio platform. Additionally, the system tracks the IP address of the intruder and provides geolocation information to aid in identifying the potential threat. The integration of these security measures enhances the overall security posture and aids in timely response and mitigation against potential threats. Keywords—Authentication mechanisms, Security, Unauthorized access, Intruder detection, Reporting mechanism, Image capture, Twilio platform, IP address tracking, Geolocation information, Security measures, Timely response, Mitigation, and Potential threats

SCDAP –secured cluster based data aggregation protocol for energy efficient communication in wireless sensor networks

A network of real time devices that can sense and transmit the information from the deployed environment by using multi hop communication is called as Wireless Sensor Network (WSNs). Despite the rapid advancement of WSN, where an increasing number of physical devices so called as sensors nodes are connected with each other, providing the improved security with optimized energy consumption during data transmission, communication and computation remains huge challenge. In wireless sensor networks, numerous sensor nodes are deployed in the physical environment to sense and collect the required information from the given environment. The sensed information is needed to be transmitted from the nodes to the control station in an energy efficient manner. Data aggregation is one kind of techniques which will optimize the energy usage in wireless sensor networks during the data transmission. In data aggregation, the unnecessary data is removed which will significantly reduce energy of the nodes during data transmission. However, collected data during the data aggregation should be completely protected and there are various threats that can be launched by the intruders to carry out unauthorised data access and can cause threat to the integrity of the network. Therefore, ensuring data security during the data aggregation process is very important and essential for the security of the network. In this paper, a Secure Cluster based Data Aggregation Protocol (SCDAP) have been proposed to provide better security through secure authentication and verification process, and to reduce overall energy consumption of the network by implementing secure clustering process to eliminate the redundant data in the network. Moreover, the proposed system is more efficient in generating public and private keys for effective and secure data transmission and verification process. The proposed system is experimentally tested in NS-3 tool and proves that the proposed system reduces high energy consumption, computational and communicational cost, end-to-end delay and improves the packet delivery ratio. Moreover, the proposed system provides better security in the network when compared to other existing systems during the data aggregation.

Privacy-Aware Secure Region-Based Handover for Small Cell Networks in 5G-Enabled Mobile Communication

The 5G mobile communication network provides seamless communication between users and service providers and promises to achieve several stringent requirements, such as seamless mobility and massive connectivity. Although 5G can offer numerous benefits, security and privacy issues still need to be addressed. For example, the inclusion of small cell networks (SCN) into 5G brings the network closer to the connected users, providing a better quality of services (QoS), resulting in a significant increase in the number of Handover procedures (HO), which will affect the security, latency and efficiency of the network. It is then crucial to design a scheme that supports seamless handovers through a secure authentication process. With this aim, in this article, we propose a secure region-based handover scheme that supports seamless connectivity for SCNs in 5G. Our proposed scheme is based on asymmetric-key-based authenticated key exchange and handover protocols that preserve user privacy and network security while providing a seamless region-based handover mechanism and effective membership revocation management. In this context, we introduce three privacy-preserving protocols, i.e., an initial authentication protocol, an intra-region handover protocol and an inter-region handover protocol, for dealing with three communication scenarios. To the best of our knowledge, this is the <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">first</i> paper to consider the privacy and security in both the intra-region and inter-region handover scenarios in 5G communication with effective membership revocation management support. Detailed security and performance analysis of our proposed scheme is presented to show that it is resilient against many security threats, is cost-effective and provides an efficient solution for 5G-enabled mobile communication.

Blockchain-Based Anonymous Authentication in Edge Computing Environment

Authentication is an important requirement for the security of edge computing applications. The existing authentication schemes either frequently rely on third-party trusted authorities, leading to the security risk of user information disclosure, or have high authentication overhead, causing certain pressure on the computation and communication of lightweight terminal equipment in the edge environment. In this paper, we proposed a blockchain-based anonymous authentication scheme for edge computing environments. We first designed a blockchain-based authentication architecture to store a small number of authentication elements in the blockchain network, and provide a decentralized and trusted authentication environment to ensure device anonymity and improve the security of authentication processes. Then, an elliptic cryptographic curve-based authentication scheme is proposed. It uses the chameleon hash function to dynamically generate the authentication data according to the elements stored in the blockchain and negotiate the session key, which effectively reduces the computational overhead in the authentication process. The experimental results show that the proposed scheme achieves a secure authentication process and effectively reduces the authentication overhead by up to 43.16% compared to three state-of-the-art schemes.

Adaptive chaotic map-based key extraction for efficient cross-layer authentication in VANETs

Vehicle-to-everything (V2X) communication is expected to offer users available and ultra-reliable transmission, particularly for critical applications related to safety and autonomy. In this context, establishing a secure and resilient authentication process with low latency and high functionality may not be achieved using conventional cryptographic methodologies due to their significant computation costs. Recent research has focused on employing the physical (PHY) characteristics of wireless channels to develop efficient discrimination techniques to overcome the shortcomings of crypto-based authentication. This paper presents a cross-layer authentication scheme for multicarrier communication, leveraging the spatially/temporally correlated wireless channel features to facilitate key verification without exposing its secrecy. By mapping the time-stamped hashed key and masking it with channel phase responses, we create a PHY-layer signature, allowing for verifying the sender's identity while employing the correlated channel responses between subcarriers to verify messages' integrity. Furthermore, we developed a Diffie-Hellman secret key extraction algorithm that employs the computationally intractable problems of the Chebyshev chaotic mapping for channel probing. Thus, terminals can extract high entropy shared keys that can be used to create dynamic PHY-layer signatures, supporting forward and backward secrecy. We evaluated the scheme's security strength against active/passive attacks. Besides theoretical analysis, we designed a 3-Dimensional (3D) scattering Doppler emulator to investigate the scheme's performance at different speeds of a moving vehicle and signal-to-noise ratios (SNRs) for a realistic vehicular channel. Theoretical and hardware implementation analyses proved the capability of the proposed scheme to support high detection probability at SNR ≥ 0 dB and speed ≤ 45 m/s.

Secure Location-Aided Routing Protocols With Wi-Fi Direct For Vehicular Ad Hoc Networks

Secure routing protocols are proposed for the vehicular ad hoc networks. The protocolsintegrate the security authentication process with the Location-Aided Routing (LAR) protocol to supportWi-Fi Direct communications between the vehicles. The methods are robust against various security threats.The security authentication process adopts a modified Diffie-Hellman key agreement protocol. The Diffie-Hellman protocol is used with a short authentication string (SAS)-based key agreement over Wi-Fi Directout-of-band communication channels. It protects the communication from any man-in-the-middle securitythreats. In particular, the security process is integrated into two LAR routing schemes, i.e., the request-zoneLAR scheme and the distance-based LAR scheme.We conduct extensive simulations with different networkparameters such as the vehicular node density, the number of the malicious nodes, and the speed of thenodes. Simulation results show that the proposed routing protocols provide superior performance in securedata delivery and average total packet delay. Also, the secure distance-based LAR protocol outperforms thesecure request-zone LAR protocol.

DS2AN: Deep stacked sparse autoencoder for secure and fast authentication in HetNets

AbstractWith the development of wireless communication technologies, providing seamless communication and secured roaming across devices has gained momentum. With 5G building upon and working together with 4G, it promises up to 100 times faster connectivity than 4G, greater bandwidth and extremely low latency. Though this dramatically enhances user experience, it calls for densification of the network by deploying smaller cells. This solution significantly improves network coverage but results in frequent handoffs. With the adoption of newer network technologies, potential new threats are introduced which becomes quite challenging for the industry. For ensuring seamless mobility, an effective handoff mechanism should ensure a secure and fast authentication process. In this article, Deep Sparse Stacked Autoencoder Network (DS2AN), an unsupervised deep learning model has been used to achieve the said objective. In the proposed method, training is done based on number of hidden layers using back propagation algorithm. Once trained, the cost function is minimized in order to achieve fine tuning of DS2AN.Compared with the existing handoff schemes, DS2AN promises a better level of security and a reduction in time required for handoff. Also, DS2AN is used to identify the presence of malicious entities thereby increasing security in the network. The performance of DS2AN algorithm for authentication delay has been evaluated based on communication and computational cost, and the results shows that DS2AN performs better compared to existing techniques.

Development and Implementation of Smart Water Metering System based on Lora Technology

The article presents an overview of traditional water meters in Vietnam, digitizing metrology technologies and wireless data transmission technology for data collection and user applications in smart water metering systems. After that, it is proposed to design a smart wireless water meter module. This paper focuses on designing and implementing a smart water meter to re-use traditional mechanical water meters by designing a smart water metering module attached to the existing meter. This way, it eliminates the costs of investing in flow water meter and influences the old water meter infrastructure system. The contribution of this paper is threefold: (i) Firstly, it proposes wireless data transmission and digitizing metrology technologies suitable for water metering systems in Viet Nam. (ii) Secondly, the proposed smart water meter module designs include hardware, firmwave, and plastic cover. There are two experimental prototypes of the module is introduced in this paper (iii) Lastly, The paper provides a water metering management software model for smart cities. And the overall systems of the proposed platform were built to verify the presented design. To reduce the amount of water leaking or users hacking from outside the meter in the measurement results, the article proposes to design features to alert about: abnormal flow, strong magnetic field influence, and equipment cover being removed. The experimental verification was designed with the Actaris water meter using Hall technology to digitize data and the Itron water meter with digitizing technology using the LC sensor. Besides, the Lora wireless network system is proposed and deployed to verify the water metering management with the advantages of low energy consumption, high security, and strict authentication process. Actual results for the laboratory environment and residential areas show that signal loss (RSSI) and signal noise (SNR) is within the allowable range. In addition, the packet loss rate &lt;1% and average power consumption meter &lt;50uA. Water metering management software is presented to verify the smart city service system.

Lightweight batch authentication and privacy-preserving scheme for online education system

Nowadays, the online education system (OES) attracts learners to improve their knowledge and skills through learning flexibility and efficient assessment procedures. The learner can learn the courses and obtain a degree in a comfortable place, no need to go to school or college. Physical verification in the traditional education system is replaced by a secure authentication process. Many authentication schemes are existing to provide authentication, but they are suffering from authentication burden, due to high computational cost. In this work, two batch authentication schemes are introduced to validate the multiple learners and batch of messages/materials simultaneously instead of authenticating one after another. It reduces the authentication burden during the learner registration and message/material distribution process. The security and performance analysis sections ensures that the proposed scheme provides the essential security features with less computational costs compared to that of existing competitive schemes.

A Systematic Approach for a Secure Authentication System

Authentication is a process of verifying the credibility of a user who is trying to access classified or confidential information. There is a vast unfold in the number of internet users, and the demand for IoT devices, cloud services has been increasing; it is now essential more than ever to protect the data hosted on the internet. So, the authentication process cannot be relied on single-factor static authentication methods to verify the user credentials. All devices in the market are not equipped with biometric systems, so a form of multi-factor authentication which is independent of biometrics needs to be adopted for a secure authentication system. This paper portraits a systematic architecture to verify user credentials using specific parameters, trying to unfold patterns using machine learning algorithms based on user's past login records, thus trying to provide a safer and secure authentication process for the users.

An efficient hash‐based authentication protocol for wireless sensor networks in Internet of Things applications with forward secrecy

SummaryWireless sensor networks (WSNs) play an influential role in the advancement of Internet of Things (IoT) because the infrastructure of WSNs consists of lots of sensors, which can be used to collect online data by the users or service providers; however, in the process of collecting the data, the users and service providers have to communicate with the sensors through an unprotected channel, so the confidentiality and integrity of the transmitted messages might be threatened by an adversary. Consequently, several authentication protocols have been proposed to provide a secure authentication process for IoT‐based WSNs. In this paper, we analyze Ghani et al.'s protocol and demonstrate that their protocol is vulnerable to user impersonation attack, malicious gateway attack, and traceability attack. Furthermore, it suffers from some design weaknesses. To fix these drawbacks, we propose a new hash‐based authentication protocol for IoT‐based WSNs. We analyze our protocol with both formal and informal methods to show that our protocol is secure against various known attacks such as sensor and user trace, sensor capture, off‐line password guessing, and replay attacks. Finally, we evaluate our protocol in terms of security features and communication and computation costs. The results show that not only the proposed protocol is more secure than other existing protocols but also reduces 60% of the execution time of the user authentication process in comparison with Ghani et al.'s protocol.

An Optimize Multimodal Biometric Authentication System For Low Classification Error Rates Using Face and Fingerprint

Now a days, the biometric system is playing a significant role, especially in the banking sector, law enforcement region. In previous times the unimodal system was used for biometrics but now the trend is for multimodal biometrics which is an important part of pattern recognition and grabs a lot of attention of the people in the research area. A lot of work is done on unimodal systems but very less work is done on multimodal characteristics. This paper deals with the secure authentication process using fingerprint and face recognition multimodal systems for high classification accuracy and low error rates. The feature extraction and optimization are done using SIFT & PSO for the facial category and the ridges and minutiae extractions are done for the fingerprint. The proposed solution is evaluated on the Ollivati dataset for faces and the FVC200 dataset for fingerprints. From the result and discussions, it can be seen that the proposed approach can attain an accuracy of approximately 99.2% which is our desired objective, and low false acceptance and rejection rates which increases the authenticity of our multimodal system.

Secure Location-Aided Routing Protocols With Wi-Fi Direct For Vehicular Ad Hoc Networks

Secure routing protocols are proposed for the vehicular ad hoc networks. The protocolsintegrate the security authentication process with the Location-Aided Routing (LAR) protocol to supportWi-Fi Direct communications between the vehicles. The methods are robust against various security threats.The security authentication process adopts a modified Diffie-Hellman key agreement protocol. The Diffie-Hellman protocol is used with a short authentication string (SAS)-based key agreement over Wi-Fi Directout-of-band communication channels. It protects the communication from any man-in-the-middle securitythreats. In particular, the security process is integrated into two LAR routing schemes, i.e., the request-zoneLAR scheme and the distance-based LAR scheme.We conduct extensive simulations with different networkparameters such as the vehicular node density, the number of the malicious nodes, and the speed of thenodes. Simulation results show that the proposed routing protocols provide superior performance in securedata delivery and average total packet delay. Also, the secure distance-based LAR protocol outperforms thesecure request-zone LAR protocol.

Design of a Secure Medical Data Sharing Scheme Based on Blockchain

With the rapid development of technologies such as artificial intelligence, blockchain, cloud computing, and big data, Medical Cyber Physical Systems (MCPS) are increasingly demanding data security, while cloud storage solves the storage problem of complex medical data. However, it is difficult to realize data security sharing. The decentralization feature of blockchain is helpful to solve the problem that the secure authentication process is highly dependent on the trusted third party and implement data security transmission. In this paper, the blockchain technology is used to describe the security requirements in authentication process, and a network model of MCPS based on blockchain is proposed. Through analysis of medical data storage architecture, it can ensure that data can't be tampered and untrackable. In the security authentication phase, bilinear mapping and intractable problems can be used to solve the security threat in the authentication process of medical data providers and users. It can avoid the credibility problem of the trusted third party, and also can realize the ?thyc=10?>two-way authentication between the hospital and blockchain node. Then, BAN logic is used to analyze security protocols, and formal analysis and comparison of security protocols are also made. The results show that the MCPS based on blockchain not only realizes medical treatment data sharing, but also meet the various security requirements in the security authentication phase. In addition, the storage and computing overhead costs is ideal. Therefore, the proposed scheme is more suitable for secure sharing of medical big data.

Design of Secure Authentication Protocol for Cloud-Assisted Telecare Medical Information System Using Blockchain

Telecare medical information system (TMIS) implemented in wireless body area network (WBAN) is convenient and time-saving for patients and doctors. TMIS is realized using wearable devices worn by a patient, and wearable devices generate patient health data and transmit them to a server through a public channel. Unfortunately, a malicious attacker can attempt performing various attacks through such a channel. Therefore, establishing a secure authentication process between a patient and a server is essential. Moreover, wearable devices have limited storage power. Cloud computing can be considered to resolve this problem by providing a storage service in the TMIS environment. In this environment, access control of the patient health data is essential for the quality of healthcare. Furthermore, the database of the cloud server is a major target for an attacker. The attacker can try to modify, forge, or delete the stored data. To resolve these problems, we propose a secure authentication protocol for a cloud-assisted TMIS with access control using blockchain. We employ ciphertext-policy attribute-based encryption (CP-ABE) to establish access control for health data stored in the cloud server, and apply blockchain to guarantee data integrity. To prove robustness of the proposed protocol, we conduct informal analysis and Burrows-Adabi-Needham (BAN) logic analysis, and we formally validate the proposed protocol using automated validation of internet security protocols and applications (AVISPA). Consequently, we show that the proposed protocol provides more security and has better efficiency compared to related protocols. Therefore, the proposed protocol is proper for a practical TMIS environment.

Improving Security and Privacy in VANET through Secure Clustering and Authentication Process

Improving Security and Privacy in VANET through Secure Clustering and Authentication Process