Traditional Authentication Methods Research Articles

A Blockchain-Based Privacy Preserving Intellectual Property Authentication Method

A Blockchain-Based Privacy Preserving Intellectual Property Authentication Method

AI-driven biometrics for secure fintech: Pioneering safety and trust

AI-driven biometrics is revolutionizing the security landscape in the financial technology (FinTech) sector, enhancing safety measures and fostering trust among users. This review explores the role of AI-driven biometrics in securing FinTech operations, highlighting its benefits and implications. AI-driven biometrics refers to the use of artificial intelligence (AI) algorithms to analyze biological data for authentication purposes. This technology has gained significant traction in the FinTech sector due to its ability to provide a higher level of security than traditional authentication methods. By analyzing unique biological traits such as fingerprints, facial features, and voice patterns, AI-driven biometrics can accurately verify the identity of users, making it difficult for unauthorized individuals to gain access to sensitive financial information. One of the key benefits of AI-driven biometrics in FinTech is its ability to enhance security measures. Traditional authentication methods such as passwords and PINs are increasingly vulnerable to hacking and fraud. AI-driven biometrics, on the other hand, offers a higher level of security by using biological traits that are unique to each individual. This makes it significantly more difficult for fraudsters to gain access to sensitive financial information. In addition to enhancing security, AI-driven biometrics also improves the user experience. By replacing traditional authentication methods with biometric authentication, users can access their accounts more quickly and conveniently, without the need to remember complex passwords or PINs. This not only improves the overall user experience but also reduces the risk of user error and account lockouts. Overall, AI-driven biometrics is pioneering safety and trust in the FinTech sector by providing a higher level of security and enhancing the user experience. As this technology continues to evolve, it is likely to play an increasingly important role in securing financial transactions and fostering trust among users.

Identifying Fake Products through a Barcode based Blockchain System

Abstract: Counterfeit products pose a significant threat to consumers, businesses, and economies worldwide. Traditional methods of authentication often fall short in effectively combating this issue. In response, this paper proposes a novel approach utilizing a barcode based blockchain system to authenticate products and detect counterfeit items. By integrating blockchain technology with barcode scanning, consumers and retailers can verify the authenticity of products throughout the supply chain. The system employs smart contracts to record product information and transactions securely, providing a transparent and immutable record of each item's journey. Through this approach, stakeholders can mitigate the risks associated with counterfeit goods, safeguard brand reputation, and enhance consumer trust. This paper outlines the architecture of the proposed system, discusses its potential benefits, and addresses implementation challenges. Furthermore, it explores the implications of integrating blockchain technology with barcode scanning for combating counterfeit products and enhancing supply chain transparency

Biometric ATM Authentication System

As technology progresses, traditional authentication methods like Personal Identification Numbers (PINs) and passwords are becoming more prone to security breaches. To address this issue, biometric-based authentication systems are being seen as a reliable solution to boost security in different areas, such as Automated Teller Machines (ATMs). This study delves into the deployment, advantages, obstacles, and future potential of a biometric-based ATM system. By examining current research, real-life examples, and technological innovations, the aim of this paper is to shed light on the efficiency and viability of biometric authentication in ATM systems. Key Words: Enhanced Security, Authentication, Efficiency, Reliability

Towards Secure Identification: A Comparative Analysis of Biometric Authentication Techniques

This paper provides an overview and analysis of existing biometric authentication methods. Biometric authentication enhances the security of traditional authentication methods by utilizing unique biological characteristics of individuals, such as fingerprints, facial features, or iris patterns, to verify identity. However, implementing biometric authentication may involve initial setup costs for service providers due to the need for specialized hardware and software. Additionally, users may experience some initial inconvenience during the enrollment process to register their biometric data. This paper presents a comparative analysis of the usability of biometric authentication techniques. Initially, a survey of existing work is conducted by comparing techniques, algorithms, and metrics used in research. Later the challenges of the distinct types of authentication techniques are discussed, and their problems are discovered. Subsequently, the findings of a quantitative study based on a are presented, aimed at assessing the usability of those techniques. The findings indicate that authentic biometric techniques are perceived as usable.

Risk Analysis Research on SMS Verification Code and Biometric Recognition Technology

This paper delves into the ongoing transformation in the domain of digital identity security. It specifically focuses on the paradigm shift from traditional methods of authentication, such as passwords and text message verification codes, towards the use of biometric recognition technology. By scrutinizing the inherent weaknesses linked with the utilization of text message verification codes, the paper underlines the demand for more trustworthy and secure solutions for authentication. Following this, biometric authentication is thoroughly examined, with a highlight on its unique features, the convenience it provides to users, and its capacity for ongoing verification. The discussion extends to practical applications of biometrics in a variety of sectors, including healthcare and high-security workplaces, as well as in situations where employing text message verification is unsuitable. A focal point of the discussion is multi-modal biometric authentication. While acknowledging the potential hurdles and future possibilities tied to the adoption of biometric technology, the paper offers an objective perspective. The overall intent of this research is to furnish insights that will enable informed decision-making regarding the deployment and improvement of digital identity verification methods across a wide range of industries.

EarSlide

Ear wearables (earables) are emerging platforms that are broadly adopted in various applications. There is an increasing demand for robust earables authentication because of the growing amount of sensitive information and the IoT devices that the earable could access. Traditional authentication methods become less feasible due to the limited input interface of earables. Nevertheless, the rich head-related sensing capabilities of earables can be exploited to capture human biometrics. In this paper, we propose EarSlide, an earable biometric authentication system utilizing the advanced sensing capacities of earables and the distinctive features of acoustic fingerprints when users slide their fingers on the face. It utilizes the inward-facing microphone of the earables and the face-ear channel of the ear canal to reliably capture the acoustic fingerprint. In particular, we study the theory of friction sound and categorize the characteristics of the acoustic fingerprints into three representative classes, pattern-class, ridge-groove-class, and coupling-class. Different from traditional fingerprint authentication only utilizes 2D patterns, we incorporate the 3D information in acoustic fingerprint and indirectly sense the fingerprint for authentication. We then design representative sliding gestures that carry rich information about the acoustic fingerprint while being easy to perform. It then extracts multi-class acoustic fingerprint features to reflect the inherent acoustic fingerprint characteristic for authentication. We also adopt an adaptable authentication model and a user behavior mitigation strategy to effectively authenticate legit users from adversaries. The key advantages of EarSlide are that it is resistant to spoofing attacks and its wide acceptability. Our evaluation of EarSlide in diverse real-world environments with intervals over one year shows that EarSlide achieves an average balanced accuracy rate of 98.37% with only one sliding gesture.

A NavCom Signal Authentication Scheme Based on Twice Two-Way Satellite Time Transfer

Low Earth Orbit (LEO) satellite communication systems typically achieve identity authentication through the encryption and decryption of two-way information, which requires complex key management systems. In contrast, the integration of navigation and communication (NavCom) signals provides novel opportunities for physical observation and authentication solutions due to its measurement functions. This paper introduces a novel signal authentication scheme based on twice two-way satellite time transfer (TWSTT) for LEO satellite systems. It leverages the non-mutated nature of the clock difference to ascertain the legitimacy of the signal by measuring the clock difference of signals at different instances. Unlike traditional authentication methods, this approach directly exploits the temporal and spatial characteristics of the signal, negating the necessity for intricate authorization key systems. Additionally, it adeptly tackles the challenges posed by spoofing interference. The performance analysis indicates that this scheme can achieve a high detection probability for the repeater spoofing signal in the low carrier-to-noise ratio conditions.

Single-board device individual authentication based on hardware performance and autoencoder transformer models

The proliferation of the Internet of Things (IoT) has led to the emergence of crowdsensing applications, where a multitude of interconnected devices collaboratively collect and analyze data. Ensuring the authenticity and integrity of the data collected by these devices is crucial for reliable decision-making and maintaining trust in the system. Traditional authentication methods are often vulnerable to attacks or can be easily duplicated, posing challenges to securing crowdsensing applications. Besides, current solutions leveraging device behavior are mostly focused on device identification, which is a simpler task than authentication. To address these issues, an individual IoT device authentication framework based on hardware behavior fingerprinting and Transformer autoencoders is proposed in this work. To support the design, a threat model details the security problems faced when performing hardware-based authentication in IoT. This solution leverages the inherent imperfections and variations in IoT device hardware to differentiate between devices with identical specifications. By monitoring and analyzing the behavior of key hardware components, such as the CPU, GPU, RAM, and Storage on devices, unique fingerprints for each device are created. The performance samples are considered as time series data and used to train outlier detection transformer models, one per device and aiming to model its normal data distribution. Then, the framework is validated within a spectrum crowdsensing system leveraging Raspberry Pi devices. After a pool of experiments, the model from each device is able to individually authenticate it between the 45 devices employed for validation. An average True Positive Rate (TPR) of 0.74±0.13 and an average maximum False Positive Rate (FPR) of 0.06±0.09 demonstrate the effectiveness of this approach in enhancing authentication, security, and trust in crowdsensing applications.

Revolutionizing Authentication: Google Passkeys Technology

In the ever-evolving landscape of digital security, the traditional methods of authentication are facing increasing challenges in safeguarding sensitive information and user privacy. Google Passkeys technology emerges as a pioneering solution poised to redefine the way users access their accounts and protect their digital identities. This abstract delves into the innovation of Google Passkeys technology, exploring its fundamental principles and potential impact. Passkeys represent a paradigm shift in authentication by eliminating the need for passwords, which have long been susceptible to breaches and often result in user frustration. Instead, Passkeys harness cutting-edge cryptographic techniques to create a seamless and secure authentication process. At its core, Google Passkeys rely on a unique combination of hardware-based security keys and advanced cryptographic algorithms. Users are equipped with physical security keys, such as USB tokens or smartphones with built-in security features, which act as the "key" to their digital identities. These keys, paired with secure communication protocols, provide a multifaceted approach to authentication that significantly enhances security.

Detecting Risky Authentication Using the OpenID Connect Token Exchange Time.

With the rise in sophisticated cyber threats, traditional authentication methods are no longer sufficient. Risk-based authentication (RBA) plays a critical role in the context of the zero trust framework-a paradigm shift that assumes no trust within or outside the network. This research introduces a novel proposal as its core: utilization of the time required by OpenID Connect (OIDC) token exchanges as a new RBA feature. This innovative approach enables the detection of tunneled connections without any intervention from the user's browser or device. By analyzing the duration of OIDC token exchanges, the system can identify any irregularities that may signify unauthorized access attempts. This approach not only improves upon existing RBA frameworks but is also in alignment with the broader movement toward intelligent and responsive security systems.

An Innovative Architecture of DRAM PUF

Cryptographic solutions based on traditional authentication methods are susceptible to several attacks on secret keys. Dynamic random access memory (DRAM)-based physical unclonable functions (PUF) are described as promising security building blocks to enable cryptography and authentication services. PUFs frequently suffer reliability concerns since they are sensitive to both internal and exterior noises. The need for enhanced resistance and dependability results in significant additional overheads. In this work, we proposed a DRAM-PUF based on the inclusion of selective hardware features in the computation. The proposed solution offers a higher number of challenge-response pairs (CRP) without additional circuitry. An innovative structure of PUF is presented in the paper which offers a reliable challenge-response pair module for authentication and authorization based on the ubiquitous nature of memory without the need for an additional circuit. DRAM PUF utilized the random startup value initialized by a capacitor followed by a random number generator. Our proposed PUF shows a reliability of 99.46% with temperature variation, a reliability of 99.5% with supply voltage variation, a uniqueness of 49.46%, a bit aliasing of 46.875%, and a uniformity of 47.65%.

Visual Tracking Based on Human Feature Extraction from Surveillance Video for Human Recognition

A multimodal human identification system based on face and body recognition may be made available for effective biometric authentication. The outcomes are achieved by extracting facial recognition characteristics using several extraction techniques, including Eigen-face and Principle Component Analysis (PCA). Systems for authenticating people using their bodies and faces are implemented using artificial neural networks (ANN) and genetic optimization techniques as classifiers. Through feature fusion and scores fusion, the biometric systems for the human body and face are merged to create a single multimodal biometric system. Human bodies may be identified with astonishing accuracy and effectiveness thanks to the SDK for the Kinect sensor. To identify people, biometrics aims to mimic the pattern recognition process. In comparison to traditional authentication methods based on secrets and tokens, it is a more dependable and safe option. Human physiological and behavioral traits are used by biometric technologies to identify people automatically. These characteristics must fulfill many criteria, especially those that relate to universality, efficacy, and applicability.

Radio-Frequency Fingerprinting for Distributed IoT Networks: Authentication and QoS Optimization

With the advance of the Internet of Things (IoT), limited wireless resources cannot meet the requirements of all users. User authentication can identify the users who are not authenticated and only allocate the resources to authenticated users. However, traditional authentication methods require complicated computations that restrict the wide deployment of low-cost devices in IoT applications. This article proposes a federal learning-based authentication method with radio-frequency fingerprinting recognition under a distributed architecture, which is novel and different from the previous works since these works primarily focus on the network with a centralized node. We propose a distributed optimization problem in a hybrid local and edge computing scenario to minimize the network delay. By transforming the original problem into its Lagrange function and calculating its derivatives, we propose a method of solving the optimization problem and prove that the proposed method could reduce the unnecessary consumption of wireless resources and effectively improve the entire network's performance. The analytical results also indicate that the proposed method could outperform the benchmark authentication methods in reducing network delay.

A Novel Two-Factor Authentication Scheme for Increased Security in Accessing the Moodle E-Learning Platform

Moodle is a platform designed for universal learning to support pedagogical interactions and educational activities. The information technology (IT) administrator uses standard authentication methods for students logging into the Moodle platform. The need for two-factor authentication has grown as institutions, governments, and individuals realize that passwords are not secure enough to protect user accounts in their current technical format. The classic connection methods have vulnerabilities, and account passwords are easy to crack. Analyzing these aspects, the goal is to create a new safe and reliable alternative to the traditional authentication methods in e-learning platforms. The proposed solution introduces a new authentication factor using digital certificates stored on physical devices or the cloud to address the evolving authentication and security challenges effectively. The absence of this authentication within the Moodle ecosystem has imparted a sense of urgency for its implementation. With the innovative authentication scheme, the users have gained confidence, are satisfied with the new solution, and have not reported security breaches. The result is increased security, data protection, and better account management.

Biometric-Based Human Identification Using Ensemble-Based Technique and ECG Signals

User authentication has become necessary in different life domains. Traditional authentication methods like personal information numbers (PINs), password ID cards, and tokens are vulnerable to attacks. For secure authentication, methods like biometrics have been developed in the past. Biometric information is hard to lose, forget, duplicate, or share because it is a part of the human body. Many authentication methods focused on electrocardiogram (ECG) signals have achieved great success. In this paper, we have developed cardiac biometrics for human identification using a deep learning (DL) approach. Cardiac biometric systems rely on cardiac signals that are captured using the electrocardiogram (ECG), photoplethysmogram (PPG), and phonocardiogram (PCG). This study utilizes the ECG as a biometric modality because ECG signals are a superior choice for accurate, secure, and reliable biometric-based human identification systems, setting them apart from PPG and PCG approaches. To get better performance in terms of accuracy and computational time, we have developed an ensemble approach based on VGG16 pre-trained transfer learning (TL) and Long Short-Term Memory (LSTM) architectures to optimize features. To develop this authentication system, we have fine-tuned this ensemble network. In the first phase, we preprocessed the ECG biosignal to remove noise. In the second phase, we converted the 1-D ECG signals into a 2-D spectrogram image using a transformation phase. Next, the feature extraction step is performed on spectrogram images using the proposed ensemble DL technique, and finally, those features are identified by the boosting machine learning classifier to recognize humans. Several experiments were performed on the selected dataset, and on average, the proposed system achieved 98.7% accuracy, 98.01% precision, 97.1% recall, and 0.98 AUC. In this paper, we have compared the developed approach with state-of-the-art biometric authentication systems. The experimental results demonstrate that our proposed system outperformed the human recognition competition.

Smartphone Authentication System Using Personal Gaits and a Deep Learning Model.

In a society centered on hyper-connectivity, information sharing is crucial, but it must be ensured that each piece of information is viewed only by legitimate users; for this purpose, the medium that connects information and users must be able to identify illegal users. In this paper, we propose a smartphone authentication system based on human gait, breaking away from the traditional authentication method of using the smartphone as the medium. After learning human gait features with a convolutional neural network deep learning model, it is mounted on a smartphone to determine whether the user is a legitimate user by walking for 1.8 s while carrying the smartphone. The accuracy, precision, recall, and F1-score were measured as evaluation indicators of the proposed model. These measures all achieved an average of at least 90%. The analysis results show that the proposed system has high reliability. Therefore, this study demonstrates the possibility of using human gait as a new user authentication method. In addition, compared to our previous studies, the gait data collection time for user authentication of the proposed model was reduced from 7 to 1.8 s. This reduction signifies an approximately four-fold performance enhancement through the implementation of filtering techniques and confirms that gait data collected over a short period of time can be used for user authentication.

Multi-Factor Authentication for Improved Enterprise Resource Planning Systems Security

Universities across the globe have increasingly adopted Enterprise Resource Planning (ERP) systems, a software that provides integrated management of processes and transactions in real-time. These systems contain lots of information hence require secure authentication. Authentication in this case refers to the process of verifying an entity’s or device’s identity, to allow them access to specific resources upon request. However, there have been security and privacy concerns around ERP systems, where only the traditional authentication method of a username and password is commonly used. A password-based authentication approach has weaknesses that can be easily compromised. Cyber-attacks to access these ERP systems have become common to institutions of higher learning and cannot be underestimated as they evolve with emerging technologies. Some universities worldwide have been victims of cyber-attacks which targeted authentication vulnerabilities resulting in damages to the institutions reputations and credibilities. Thus, this research aimed at establishing authentication methods used for ERPs in Kenyan universities, their vulnerabilities, and proposing a solution to improve on ERP system authentication. The study aimed at developing and validating a multi-factor authentication prototype to improve ERP systems security. Multi-factor authentication which combines several authentication factors such as: something the user has, knows, or is, is a new state-of-the-art technology that is being adopted to strengthen systems’ authentication security. This research used an exploratory sequential design that involved a survey of chartered Kenyan Universities, where questionnaires were used to collect data that was later analyzed using descriptive and inferential statistics. Stratified, random and purposive sampling techniques were used to establish the sample size and the target group. The dependent variable for the study was limited to security rating with respect to realization of confidentiality, integrity, availability, and usability while the independent variables were limited to adequacy of security, authentication mechanisms, infrastructure, information security policies, vulnerabilities, and user training. Correlation and regression analysis established vulnerabilities, information security policies, and user training to be having a higher impact on system security. The three variables hence acted as the basis for the proposed multi-factor authentication framework for improve ERP systems security.

Traditional and new methods of pension authentication in China: Reasons, methods and problems

The article discusses the topic of the digitalization of the pension systems in the People’s Republic of China, the spread of the new social authentication methods and the new pension payment confirmation system in the country. The population ageing problem is forcing the government of the People’s Republic of China to develop new methods of social support for the retired citizens. The article deals with the problems of pension payment confirmation for the Chinese, who are currently abroad, as well as the methods of solving the issue. Special attention is paid to the problem of pension authentication through overseas Chinese multifunctional centers (MFC). The article studies the main positive and negative aspects of “traditional” and “new” methods of pension authentication.

Blockchain-Based Authentication Protocol Design from a Cloud Computing Perspective

Cloud computing is a disruptive technology that has transformed the way people access and utilize computing resources. Due to the diversity of services and complexity of environments, there is widespread interest in how to securely and efficiently authenticate users under the same domain. However, many traditional authentication methods involve untrusted third parties or overly centralized central authorities, which can compromise the security of the system. Therefore, it is crucial to establish secure authentication channels within trusted domains. In this context, we propose a secure and efficient authentication protocol, HIDA (Hyperledger Fabric Identity Authentication), for the cloud computing environment. Specifically, by introducing federated chain technology to securely isolate entities in the trust domain, and combining it with zero-knowledge proof technology, users’ data are further secured. In addition, Subsequent Access Management allows users to prove their identity by revealing only brief credentials, greatly improving the efficiency of access. To ensure the security of the protocol, we performed a formal semantic analysis and proved that it can effectively protect against various attacks. At the same time, we conducted ten simulations to prove that the protocol is efficient and reliable in practical applications. The research results in this paper can provide new ideas and technical support for identity authentication in a cloud environment and provide a useful reference for realizing the authentication problem in cloud computing application scenarios.