Three Factor Authentication Protocol Based on Bilinear Pairing
Secure authentication mechanism is a pre-requisite to remote access of server’s resources particularly when done over the Internet. This paper presents a three factor authentication protocol which is based on verification of user’s: biometrics, knowledge
- PDF / 1,711,600 Bytes
- 7 Pages / 439.37 x 666.142 pts Page_size
- 12 Downloads / 205 Views
Abstract Secure authentication mechanism is a pre-requisite to remote access of server’s resources particularly when done over the Internet. This paper presents a three factor authentication protocol which is based on verification of user’s: biometrics, knowledge proof of a password and possession of token to pass authentication. The proposed protocol utilizes bilinear mapping for session key establishment and elliptic curve discrete logarithm problem for security. Keywords Authentication
Bilinear pairing Three factor authentication
1 Introduction Information security is concerned with the assurance of confidentiality, integrity and availability of information in all forms. There are many tools and techniques that can support the management of information security one of which is the use of tokens that store client identifying information like smart card [1–5]. Smart card authentication falls short of password sharing among colleagues, password guessing and smart card breaching [3]. In applications with strict user identification smart card flaws can be dealt with by employing the biometric authentication besides the password. Biometrics is hard to forge hence outworks impersonation attack resilience thus provides a reliable means of authentication [3–5]. T. F. Vallent Department of IT Convergence, Kyungil University, Kyungpook, Kyungsansi 712-701, Korea e-mail: [email protected] H. Kim (&) Department of Cyber Security, Kyungil University, Kyungpook, Kyungsansi 712-701, Korea e-mail: [email protected]
J. J. (Jong Hyuk) Park et al. (eds.), Multimedia and Ubiquitous Engineering, Lecture Notes in Electrical Engineering 240, DOI: 10.1007/978-94-007-6738-6_32, Springer Science+Business Media Dordrecht(Outside the USA) 2013
253
254
T. F. Vallent and H. Kim
A biometric system is a pattern recognition system that extracts an individual’s unique features set for authentication by comparing these features’ template prestored in the database [2, 4, 6]. Three factor authentication involves knowledge proof by checking user’s knowledge of correct password, token possession and biometrics matching before authentication. Biometric authentication can be applied for identification and non-repudiation and for preserving the integrity like in passport, medical records access control among others [2, 3]. In 1981, Lamport first proposed a remote password authentication scheme for insecure communication. The protocol uses verification table hence it’s at the edge of a huge security risks once the system is compromised [7]. Hwang and Li (2000) proposed a remote user authentication scheme using smart cards based on ElGamal’s public key cryptosystem the protocol suffers from man-in-the middle attack [2]. In 2010 Li and Hwang proposed another remote user authentication based on biometrics verification, smart card, one-way hash function but still bears a problem of man-in-the-middle attack [2, 4].
2 Preliminaries This section introduces mathematical background necessary for the proposed protocol’s description.
2.1 Bilinear Pairi
Data Loading...
