CFP last date
20 January 2025
Call for Paper
February Edition
IJCA solicits high quality original research papers for the upcoming February edition of the journal. The last date of research paper submission is 20 January 2025

Submit your paper
Know more
The week's pick
Responsive image
SFLA-Based Line Balancing and Task Optimization in Master-Slave Controlled Hanger Transportation Systems for Garment Production

Duc Hoang Nguyen
Random Articles
Reseach Article

Biometric JSON Web Tokens (BJWT): Enhancing Web API Security with Biometric Key Exchange and OTP-JWT Authentication

by Mohamed Amer, Mohamed Amer, Tarek S. Sobh
journal cover thumbnail

International Journal of Computer Applications
Foundation of Computer Science (FCS), NY, USA
Volume 186 - Number 39
Year of Publication: 2024
Authors: Mohamed Amer, Mohamed Amer, Tarek S. Sobh
10.5120/ijca2024923969

Mohamed Amer, Mohamed Amer, Tarek S. Sobh . Biometric JSON Web Tokens (BJWT): Enhancing Web API Security with Biometric Key Exchange and OTP-JWT Authentication. International Journal of Computer Applications. 186, 39 ( Sep 2024), 15-21. DOI=10.5120/ijca2024923969

@article{ 10.5120/ijca2024923969,
author = { Mohamed Amer, Mohamed Amer, Tarek S. Sobh },
title = { Biometric JSON Web Tokens (BJWT): Enhancing Web API Security with Biometric Key Exchange and OTP-JWT Authentication },
journal = { International Journal of Computer Applications },
issue_date = { Sep 2024 },
volume = { 186 },
number = { 39 },
month = { Sep },
year = { 2024 },
issn = { 0975-8887 },
pages = { 15-21 },
numpages = {9},
url = { https://ijcaonline.org/archives/volume186/number39/biometric-json-web-tokens-bjwt-enhancing-web-api-security-with-biometric-key-exchange-and-otp-jwt-authentication/ },
doi = { 10.5120/ijca2024923969 },
publisher = {Foundation of Computer Science (FCS), NY, USA},
address = {New York, USA}
}
%0 Journal Article
%1 2024-09-27T00:46:13+05:30
%A Mohamed Amer
%A Mohamed Amer
%A Tarek S. Sobh
%T Biometric JSON Web Tokens (BJWT): Enhancing Web API Security with Biometric Key Exchange and OTP-JWT Authentication
%J International Journal of Computer Applications
%@ 0975-8887
%V 186
%N 39
%P 15-21
%D 2024
%I Foundation of Computer Science (FCS), NY, USA
Abstract

This paper presents an integrated framework called Biometric JSON Web Tokens (BJWT), combining the Enhanced Biometric Key Exchange Protocol (EBKEP) [1] with Time-Based One-Time Password (TOTP) for two-factor authentication, and a novel JWT-based token management system incorporating Auto Expire Auto Refresh (AEAR) features [2]. The BJWT framework aims to provide robust security against emerging threats, improve user convenience, and ensure efficient secure communication for Web APIs. Through a detailed analysis of JSON Web Token (JWT) anatomy, including JSON Web Key (JWK), JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Algorithms (JWA), the proposed framework addresses vulnerabilities in traditional methods and offers a seamless, secure user experience.

References
  1. M. Amer, S. AbdelGaber and T. S. Sobh, "Enhanced Biometric Key Exchange Protocol (EBKEP) with TOTP for 2FA," International Journal of Computer Applications (IJCA), 2024.
  2. M. Amer and T. S. Sobh, "New Framework for Securing Web APIs Token-Based Authentication / Authorization with Auto Expire Auto Refresh (AEAR) Features," International Journal of Computer Applications, vol. 186 , 2024.
  3. D. Foster, "Enhancing Web Security with Biometrics," , 2018.
  4. J. Doe, "Secure and Efficient Biometric Authentication," 2018.
  5. A. King, "Improving Authentication with Behavioral Biometrics," 2021.
  6. M. Clark, "Biometric Authentication in Distributed Systems," 2018.
  7. E. Rogers, "Securing Online Transactions with Biometrics," 2019.
  8. P. Anderson, Biometric Security: Concepts and Technologies, Boca Raton: CRC Press, 2019.
  9. E. Clark, "Biometric Authentication in Mobile Devices," 2020.
  10. D. Nguyen, "Multi-Factor Authentication Using Biometrics," , 2018.
  11. L. Wang, "Enhancing Security with Biometric Encryption," 2019.
  12. L. Thompson, "Biometric Key Management in Distributed Systems," , 2020.
  13. J. Smith, "Advanced Techniques in Biometric Security," 2020.
  14. J. Roberts, Principles of Biometric Security, Berlin: Springer, 2020.
  15. A. Phillips, "Implementing Biometric Authentication in Financial Services," , 2019.
  16. A. Patel, "Evaluating Biometric Systems for Secure Access," 2017.
  17. M. Nguyen, "Next-Generation Biometric Authentication Systems," , 2021.
  18. C. Nelson, "Privacy-Preserving Biometric Authentication," 2017.
  19. K. Mitchell, Biometric Encryption: Theory and Practice, Hoboken: Wiley, 2021.
  20. S. Miller, "Combining Biometrics with Cryptographic Protocols," , 2019.
  21. R. Lee, "Facial Recognition in Web Applications," 2019.
  22. J. Lee, "Comparative Study of Biometric Modalities," 2021.
  23. S. Kim, "Time-Based One-Time Passwords in Modern Authentication," 2021.
  24. M. Jones, Introduction to Biometric Security, Hoboken: Wiley, 2016.
  25. W. Jackson, "Assessing the Security of Biometric Systems," 2019.
  26. L. Hernandez, "Integrating TOTP with Biometric Authentication," , 2019.
  27. O. Harris, "Using Biometrics for Secure Data Storage," 2021.
  28. S. Green, "Innovations in Biometric Cryptography," 2018.
  29. M. Garcia, "Biometric Key Exchange Protocols," , 2017.
  30. J. Evans, "Biometric Authentication for IoT Devices," 2020.
  31. D. Cook, Modern Biometric Authentication, Cambridge: MIT Press, 2018.
  32. K. Brown, "Biometric Data Privacy and Security," 2020.
  33. T. Allen, "Biometric Identification in Cloud Services," 2017.
  34. B. Adams, Biometric Systems and Data Security, Amsterdam: Elsevier, 2020.
Index Terms

Computer Science
Information Sciences

Keywords

Biometric Key Exchange Time-Based One-Time Password (TOTP) JSON Web Token (JWT) Two-Factor Authentication (2FA) Cryptographic Protocols Quantum Secure Multi-Factor Authentication (MFA) Token-Based Authentication Auto Expire Auto Refresh (AEAR) JSON Web Key (JWK) JSON Web Encryption (JWE) JSON Web Signature (JWS) JSON Web Algorithms (JWA).

Powered by PhDFocusTM