Multi-factor challenge/response approach for remote biometric authentication

Hisham Al-Assam; Sabah A. Jassim

doi:10.1117/12.884578

31 May 2011 Multi-factor challenge/response approach for remote biometric authentication

Hisham Al-Assam, Sabah A. Jassim

Proceedings Volume 8063, Mobile Multimedia/Image Processing, Security, and Applications 2011; 80630V (2011) https://doi.org/10.1117/12.884578
Event: SPIE Defense, Security, and Sensing, 2011, Orlando, Florida, United States

Abstract

Although biometric authentication is perceived to be more reliable than traditional authentication schemes, it becomes vulnerable to many attacks when it comes to remote authentication over open networks and raises serious privacy concerns. This paper proposes a biometric-based challenge-response approach to be used for remote authentication between two parties A and B over open networks. In the proposed approach, a remote authenticator system B (e.g. a bank) challenges its client A who wants to authenticate his/her self to the system by sending a one-time public random challenge. The client A responds by employing the random challenge along with secret information obtained from a password and a token to produce a one-time cancellable representation of his freshly captured biometric sample. The one-time biometric representation, which is based on multi-factor, is then sent back to B for matching. Here, we argue that eavesdropping of the one-time random challenge and/or the resulting one-time biometric representation does not compromise the security of the system, and no information about the original biometric data is leaked. In addition to securing biometric templates, the proposed protocol offers a practical solution for the replay attack on biometric systems. Moreover, we propose a new scheme for generating a password-based pseudo random numbers/permutation to be used as a building block in the proposed approach. The proposed scheme is also designed to provide protection against repudiation. We illustrate the viability and effectiveness of the proposed approach by experimental results based on two biometric modalities: fingerprint and face biometrics.

Citation Download Citation

Hisham Al-Assam and Sabah A. Jassim "Multi-factor challenge/response approach for remote biometric authentication", Proc. SPIE 8063, Mobile Multimedia/Image Processing, Security, and Applications 2011, 80630V (31 May 2011); https://doi.org/10.1117/12.884578

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available