The week's pick
Random Articles
Reseach Article
Enhanced Biometric Key Exchange Protocol (EBKEP) with TOTP for 2FA
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 186 - Number 29 |
| Year of Publication: 2024 |
| Authors: Mohamed Amer, Sayed Abdel Gaber, Tarek S. Sobh |
10.5120/ijca2024923807
|
Mohamed Amer, Sayed Abdel Gaber, Tarek S. Sobh . Enhanced Biometric Key Exchange Protocol (EBKEP) with TOTP for 2FA. International Journal of Computer Applications. 186, 29 ( Jul 2024), 34-40. DOI=10.5120/ijca2024923807
Abstract
The increasing computational power and advent of quantum computing necessitate advancements in cryptographic protocols. This paper presents the Enhanced Biometric Key Exchange Protocol (EBKEP) with Time-Based One-Time Password (TOTP) generation for two-factor authentication (2FA), leveraging the uniqueness of biometric data combined with advanced cryptographic techniques. Using face recognition as a case study, EBKEP aims to provide a secure, efficient, and user-friendly method for key exchange, ensuring robust security even in the face of emerging quantum threats. This paper details the design, implementation, quality checks, and security features of EBKEP, highlighting its potential as a next-generation key exchange protocol. The results show significant improvements in security, user convenience, and performance, validated through a comprehensive test plan and procedure.
References
- A. Adler, R. Youmaran, and S. Loyka, "Towards a measure of biometric information," in IEEE Computer Society Conference on Computer Vision and Pattern Recognition Workshops (CVPRW), 2006, pp. 55-55.
- M. Bellare and P. Rogaway, "Random oracles are practical: A paradigm for designing efficient protocols," in Proceedings of the 1st ACM Conference on Computer and Communications Security, 1993, pp. 62-73.
- S. A. Camtepe and B. Yener, "Key distribution mechanisms for wireless sensor networks: a survey," IEEE Transactions on Mobile Computing, vol. 5, no. 4, pp. 347-361, Apr. 2006.
- S. Chatterjee, A. K. Das, and J. K. Sing, "A new efficient biometric-based remote user authentication scheme for multi-server environments," IEEE Systems Journal, vol. 12, no. 2, pp. 1620-1630, Jun. 2018.
- A. K. Das, "Analysis and improvement on an efficient biometric-based remote user authentication scheme using smart cards," IET Information Security, vol. 5, no. 3, pp. 145-151, Sept. 2011.
- W. Diffie and M. Hellman, "New directions in cryptography," IEEE Transactions on Information Theory, vol. 22, no. 6, pp. 644-654, Nov. 1976.
- J. Daugman, "How iris recognition works," IEEE Transactions on Circuits and Systems for Video Technology, vol. 14, no. 1, pp. 21-30, Jan. 2004.
- D. Boneh and V. Shoup, "A Graduate Course in Applied Cryptography," Draft version 0.5, 2020.
- R. L. Rivest, A. Shamir, and L. Adleman, "A method for obtaining digital signatures and public-key cryptosystems," Communications of the ACM, vol. 21, no. 2, pp. 120-126, Feb. 1978.
- S. Li and A. C. Kot, "Fingerprint combination for privacy protection," IEEE Transactions on Information Forensics and Security, vol. 8, no. 2, pp. 350-360, Feb. 2013.
- S. N. Gowda and S. R. R. Kumari, "Biometric authentication system: A novel design and implementation using asymmetric cryptography," in IEEE Conference on Information and Communication Technology (CICT), 2018, pp. 1-6.
- D. Huang and D. Hu, "A survey on hybrid secure communication protocols for Internet of Things," IEEE Internet of Things Journal, vol. 7, no. 6, pp. 4696-4706, Jun. 2020.
- A. Jain, A. Ross, and S. Prabhakar, "An introduction to biometric recognition," IEEE Transactions on Circuits and Systems for Video Technology, vol. 14, no. 1, pp. 4-20, Jan. 2004.
- H. Sellahewa and S. J. Spillman, "Image processing for secure biometrics," IEEE Signal Processing Magazine, vol. 21, no. 3, pp. 12-13, May 2004.
- S. Pankanti, S. Prabhakar, and A. K. Jain, "On the individuality of fingerprints," IEEE Transactions on Pattern Analysis and Machine Intelligence, vol. 24, no. 8, pp. 1010-1025, Aug. 2002.
- J. Bringer, H. Chabanne, and A. Patey, "Shade: Secure Hamming distance computation from encrypted data," in Financial Cryptography and Data Security, Springer, 2013, pp. 164-176.
- M. Bellare, D. Pointcheval, and P. Rogaway, "Authenticated key exchange secure against dictionary attacks," in Advances in Cryptology (EUROCRYPT 2000), Springer, 2000, pp. 139-155.
- H. M. Ng, S. T. Shen, and H. W. Tang, "Biometric key exchange protocols," in IEEE International Conference on Communications (ICC), 2018, pp. 1-6.
- P. Tuyls, A. H. Makkouk, and E. Marechal, "Cryptographic key generation from biometric data using lattice quantization," in IEEE International Conference on Acoustics, Speech, and Signal Processing (ICASSP), 2007, pp. 129-132.
- Y. Dodis, L. Reyzin, and A. Smith, "Fuzzy extractors: How to generate strong keys from biometrics and other noisy data," SIAM Journal on Computing, vol. 38, no. 1, pp. 97-139, Mar. 2008.
- Nguyen, D. T., & Bai, L. (2021). Deep Learning-Based Biometric Authentication: A Survey. IEEE Transactions on Biometrics, Behavior, and Identity Science.
- Zheng, L., & Jin, Z. (2022). Enhancing Biometric Authentication Using Deep Convolutional Neural Networks. Pattern Recognition Letters.
- Krawczyk, H., Bellare, M., & Canetti, R. (1997). HMAC: Keyed-Hashing for Message Authentication. RFC 2104.
- Shi, E., & Perrig, A. (2006). Designing Secure Sensor Networks. IEEE Wireless Communications.
- Bonneau, J., Herley, C., Van Oorschot, P. C., & Stajano, F. (2012). The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes. IEEE Symposium on Security and Privacy.
- Song, J., & Ahn, G. (2016). Secure Two-Factor Authentication Using TOTP and QR Code. Journal of Information Security and Applications.
- Deng, J., Guo, J., Xue, N., & Zafeiriou, S. (2019). ArcFace: Additive Angular Margin Loss for Deep Face Recognition. CVPR.
Index Terms
Keywords