The Experts below are selected from a list of 14079 Experts worldwide ranked by ideXlab platform
Anongporn Salaiwarakul - One of the best experts on this subject based on the ideXlab platform.
-
Secure Remote Biometric Authentication Protocol
Advanced Materials Research, 2014Co-Authors: Anongporn SalaiwarakulAbstract:The secure remote Biometric Authentication protocol proposed in this paper solves the problem from the nature of the Biometric data. The proposed protocol preserves the privacy of the users Biometric data when it is transmitted in the protocol. The liveness property of the protocol guarantees that the Biometric data used to authenticate the user comes from the live presentation of the user. The most important property related with the intentional Authentication; it confirms that the purpose of the user Authentication correspondences to the users purpose. The proposed secure remote Biometric Authentication protocol promises three properties so that the user is confident with the security level that the protocol offers and it guarantees that the protocol does not manipulate with an intruder.
-
A Remote Biometric Authentication Protocol for Online Banking
International Journal of Electrical Energy, 2013Co-Authors: Anongporn SalaiwarakulAbstract:This paper presents a remote Biometric Authentication protocol illustrated by online banking situation. The protocol assures three properties which are crucial if the Biometric data is involved in the Authentication process. Even if the Biometric data is excellent in authenticating the users because it verifies the users by mean of their personal attributes, the Biometric data is sensitive in security prospective because it is hard to be kept secret. The Biometric Authentication works well in supervised situation if the verifier can prove that the Biometric data comes from the live presentation of the user at the time of user's verification. Prone to security risk in the unsupervised situation, especially online transaction, where a captured Biometric data can be presented to the system, a Biometric Authentication in remote situation that guarantees the security level should be proposed. To assure this, the security properties of the protocol should be verified and analysed to promise that the protocol does not manipulate the data with an intruder. This paper verifies and analysed the intended security properties of the proposed protocol. The result of the analysis shows that the protocol preserves the three properties: privacy of the Biometric data, liveness, and intentional Authentication.
-
Verification of secure Biometric Authentication protocols
2010Co-Authors: Anongporn SalaiwarakulAbstract:The thesis presents verification of Biometric Authentication protocols. ProVerif is used as the verification tool for verifying and analysing the protocols. The protocol are analysed in ProVerif model. Various attacks to the protocols are generated in order to verify whether the protocols hold their intended properties. We have selected three Biometric Authentication protocols and proposed a remote Biometric Authentication protocol for on-line banking. Each of which has different intended purposes and properties. The first protocol is generic Authentication using Biometric data. This protocol provides three properties of the protocol: effectiveness, correctness, and privacy of Biometric data. In addition, the protocol is clarified in order to verify the property of effectiveness. Details in chapter 3 show that without this clarification, the property of effectiveness would not hold. The second protocol is a Biometric Authentication protocol for a signature creation application. This is a specific purpose protocol that requires successfully Biometric Authentication in order to proceed the user's request, signing a document. The two properties of the protocol are verified: privacy of Biometric data and intensional Authentication. This protocol is used for signing a document using a user's private key. Hence, extension of the protocol is required so that the intensional Authentication property can be verified. This property demonstrates that the legitimate user signs only the document that he intends to sign. A detailed description of this work can be found in chapter 4. The thesis further considers a remote Biometric Authentication protocol. Chapter 5 presents the protocol and verification of its desirable properties. This chapter shows analysis of the two properties of the protocol: privacy of Biometric data and authenticity. Next, the thesis proposes a remote Biometric Authentication protocol for on-line banking in chapter 6. The protocol promises three intended properties: privacy of the Biometric data, liveness of Biometric data and intensional Authentication. The protocol is illustrated in detail and desirable properties of the protocol are verified. Finally, chapter 7 concludes this study by briefly comparing properties that each protocol hold. Furthermore, we have identified the limitations of this thesis and possible areas for further research.
Aikaterini Mitrokotsa - One of the best experts on this subject based on the ideXlab platform.
-
Privacy-Preserving Biometric Authentication: Challenges and Directions
Security and Communication Networks, 2017Co-Authors: Elena Pagnin, Aikaterini MitrokotsaAbstract:An emerging direction for authenticating people is the adoption of Biometric Authentication systems. Biometric credentials are becoming increasingly popular as a means of authenticating people due to the wide range of advantages that they provide with respect to classical Authentication methods (e.g., password-based Authentication). The most characteristic feature of this Authentication method is the naturally strong bond between a user and her Biometric credentials. This very same advantageous property, however, raises serious security and privacy concerns in case the Biometric trait gets compromised. In this article, we present the most challenging issues that need to be taken into consideration when designing secure and privacy-preserving Biometric Authentication protocols. More precisely, we describe the main threats against privacy-preserving Biometric Authentication systems and give directions on possible countermeasures in order to design secure and privacy-preserving Biometric Authentication protocols.
-
CANS - Security of a Privacy-Preserving Biometric Authentication Protocol Revisited
Cryptology and Network Security, 2014Co-Authors: Aysajan Abidin, Kanta Matsuura, Aikaterini MitrokotsaAbstract:Biometric Authentication establishes the identity of an individual based on Biometric templates e.g. fingerprints, retina scans etc.. Although Biometric Authentication has important advantages and many applications, it also raises serious security and privacy concerns. Here, we investigate a Biometric Authentication protocol that has been proposed by Bringer et al. and adopts a distributed architecture i.e. multiple entities are involved in the Authentication process. This protocol was proven to be secure and privacy-preserving in the honest-but-curious or passive attack model. We present an attack algorithm that can be employed to mount a number of attacks on the protocol under investigation. We then propose an improved version of the Bringer et al. protocol that is secure in the malicious or active insider attack model and has forward security.
-
A Privacy-preserving Biometric Authentication Protocol Revisited
2014Co-Authors: Aysajan Abidin, Aikaterini MitrokotsaAbstract:Biometric Authentication establishes the identity of an individual based on Biometric templates (i.e. fingerprints, retina scans etc.). Although Biometric Authentication has important advantages and many applications, it also raises serious security and privacy concerns. In this parer, we investigate a privacy-preserving Biometric Authentication protocol that has been proposed by Bringer et al. and adopts a distributed architecture (i.e. multiple entities are involved in the Authentication process). We present an attack algorithm that can be employed to mount a number of attacks on the protocol under investigation and propose an improved version of the Bringer et al. protocol that combats the presented attacks.
Nai-wei Lo - One of the best experts on this subject based on the ideXlab platform.
-
A Machine Learning Framework for Biometric Authentication Using Electrocardiogram
IEEE Access, 2019Co-Authors: Chan Yeob Yeun, Ernesto Damiani, Nai-wei LoAbstract:This paper introduces a framework for how to appropriately adopt and adjust machine learning (ML) techniques used to construct electrocardiogram (ECG)-based Biometric Authentication schemes. The proposed framework can help investigators and developers on ECG-based Biometric Authentication mechanisms define the boundaries of required datasets and get training data with good quality. To determine the boundaries of datasets, use case analysis is adopted. Based on various application scenarios on ECG-based Authentication, three distinct use cases (or Authentication categories) are developed. With more qualified training data given to corresponding machine learning schemes, the precision on ML-based ECG Biometric Authentication mechanisms are increased in consequence. The ECG time slicing technique with the R-peak anchoring is utilized in this framework to acquire ML training data with good quality. In the proposed framework four new measure metrics are introduced to evaluate the quality of the ML training and testing data. In addition, a Matlab toolbox, containing all proposed mechanisms, metrics, and sample data with demonstrations using various ML techniques, is developed and made publicly available for further investigation. For developing ML-based ECG Biometric Authentication, the proposed framework can guide researchers to prepare the proper ML setups and the ML training datasets along with three identified user case scenarios. For researchers adopting ML techniques to design new schemes in other research domains, the proposed framework is still useful for generating the ML-based training and testing datasets with good quality and utilizing new measure metrics.
Zheng Yan - One of the best experts on this subject based on the ideXlab platform.
-
A Survey on Biometric Authentication: Toward Secure and Privacy-Preserving Identification
IEEE Access, 2019Co-Authors: Zhang Rui, Zheng YanAbstract:In order to overcome the difficulty of password management and improve the usability of Authentication systems, Biometric Authentication has been widely studied and has attracted special attention in both academia and industry. Many Biometric Authentication systems have been researched and developed, especially for mobile devices. However, the existing Biometric Authentication systems still have defects. Some biological features have not been deeply investigated. The existing systems could be vulnerable to attacks, such as replay attack and suffer from user privacy intrusion, which seriously hinder their wide acceptance by end users. The literature still lacks a thorough review on the recent advances of Biometric Authentication for the purpose of secure and privacy-preserving identification. In this paper, we classify and thoroughly review the existing Biometric Authentication systems by focusing on the security and privacy solutions. We analyze the threats of Biometric Authentication and propose a number of criteria with regard to secure and privacy-preserving Authentication. We further review the existing works of Biometric Authentication by analyzing their differences and summarizing the advantages and disadvantages of each based on the proposed criteria. In particular, we discuss the problems of aliveness detection and privacy protection in Biometric Authentication. Based on our survey, we figure out a number of open research issues and further specify a number of significant research directions that are worth special efforts in future research.
Aysajan Abidin - One of the best experts on this subject based on the ideXlab platform.
-
Inscrypt - On Privacy-Preserving Biometric Authentication
Information Security and Cryptology, 2017Co-Authors: Aysajan AbidinAbstract:Biometric Authentication is becoming increasingly popular as a convenient Authentication method. However, the privacy and security issues associated with Biometric Authentication are very serious. Privacy-preserving Biometric Authentication addresses privacy concerns associated with the use of Biometrics and offers a secure solution for user Authentication. Given the tremendous expansion of wireless communications a new distributed architecture in Biometric Authentication is evolving. In this distributed setting, a resource constrained client may outsource part of the computations during the Biometric Authentication process to a more powerful device (cloud server). In this work, we consider one such distributed setting consisting of clients, a cloud server, and a service provider and make a case for the need for verifiable computation to achieve security against malicious, as opposed to an honest-but-curious, cloud server. In particular, we propose to use verifiable computation on top of an homomorphic encryption scheme to verify that the cloud server correctly performs the computations outsourced to it. A proof of security of a generic protocol in the presence of a malicious cloud server is also provided. Finally, we discuss how an XOR-linear message Authentication code can be used to verify the correctness of the computation.
-
CANS - Security of a Privacy-Preserving Biometric Authentication Protocol Revisited
Cryptology and Network Security, 2014Co-Authors: Aysajan Abidin, Kanta Matsuura, Aikaterini MitrokotsaAbstract:Biometric Authentication establishes the identity of an individual based on Biometric templates e.g. fingerprints, retina scans etc.. Although Biometric Authentication has important advantages and many applications, it also raises serious security and privacy concerns. Here, we investigate a Biometric Authentication protocol that has been proposed by Bringer et al. and adopts a distributed architecture i.e. multiple entities are involved in the Authentication process. This protocol was proven to be secure and privacy-preserving in the honest-but-curious or passive attack model. We present an attack algorithm that can be employed to mount a number of attacks on the protocol under investigation. We then propose an improved version of the Bringer et al. protocol that is secure in the malicious or active insider attack model and has forward security.
-
A Privacy-preserving Biometric Authentication Protocol Revisited
2014Co-Authors: Aysajan Abidin, Aikaterini MitrokotsaAbstract:Biometric Authentication establishes the identity of an individual based on Biometric templates (i.e. fingerprints, retina scans etc.). Although Biometric Authentication has important advantages and many applications, it also raises serious security and privacy concerns. In this parer, we investigate a privacy-preserving Biometric Authentication protocol that has been proposed by Bringer et al. and adopts a distributed architecture (i.e. multiple entities are involved in the Authentication process). We present an attack algorithm that can be employed to mount a number of attacks on the protocol under investigation and propose an improved version of the Bringer et al. protocol that combats the presented attacks.