TL;DR: The inherent strengths of biometrics-based authentication are outlined, the weak links in systems employing biometric authentication are identified, and new solutions for eliminating these weak links are presented.
Abstract: Because biometrics-based authentication offers several advantages over other authentication methods, there has been a significant surge in the use of biometrics for user authentication in recent years. It is important that such biometrics-based authentication systems be designed to withstand attacks when employed in security-critical applications, especially in unattended remote applications such as e-commerce. In this paper we outline the inherent strengths of biometrics-based authentication, identify the weak links in systems employing biometrics-based authentication, and present new solutions for eliminating some of these weak links. Although, for illustration purposes, fingerprint authentication is used throughout, our analysis extends to other biometrics-based methods.
TL;DR: In this article, the authors examine the authenticity work involved in claiming authenticity and discuss the processes of authentication and explore the situations in which the quest for authenticity makes for change and conclude that the salience of authenticity can change.
Abstract: After showing that authenticity is socially constructed rather than an attribute of that which is called authentic, we examine the authenticity work involved in claiming authenticity and discuss the processes of authentication. We then explore the situations in which the quest for authenticity makes for change and conclude by showing that the salience of authenticity can change.
TL;DR: The present study makes the first step towards understanding the underlying evaluation metric for anonymous two-factor authentication, which is believed to facilitate better design of anonymousTwo-factor protocols that offer acceptable trade-offs among usability, security and privacy.
Abstract: Despite two decades of intensive research, it remains a challenge to design a practical anonymous two-factor authentication scheme, for the designers are confronted with an impressive list of security requirements (e.g., resistance to smart card loss attack) and desirable attributes (e.g., local password update). Numerous solutions have been proposed, yet most of them are shortly found either unable to satisfy some critical security requirements or short of a few important features. To overcome this unsatisfactory situation, researchers often work around it in hopes of a new proposal (but no one has succeeded so far), while paying little attention to the fundamental question: whether or not there are inherent limitations that prevent us from designing an “ideal” scheme that satisfies all the desirable goals? In this work, we aim to provide a definite answer to this question. We first revisit two foremost proposals, i.e. Tsai et al.’s scheme and Li’s scheme, revealing some subtleties and challenges in designing such schemes. Then, we systematically explore the inherent conflicts and unavoidable trade-offs among the design criteria. Our results indicate that, under the current widely accepted adversarial model, certain goals are beyond attainment. This also suggests a negative answer to the open problem left by Huang et al. in 2014. To the best of knowledge, the present study makes the first step towards understanding the underlying evaluation metric for anonymous two-factor authentication, which we believe will facilitate better design of anonymous two-factor protocols that offer acceptable trade-offs among usability, security and privacy.
TL;DR: In this paper, the authors examine the authenticity work involved in claiming authenticity and discuss the processes of authentication and explore the situations in which the quest for authenticity makes for change and conclude that the salience of authenticity can change.
Abstract: After showing that authenticity is socially constructed rather than an attribute of that which is called authentic, we examine the authenticity work involved in claiming authenticity and discuss the processes of authentication. We then explore the situations in which the quest for authenticity makes for change and conclude by showing that the salience of authenticity can change.
TL;DR: A personal, biometric authentication system is disclosed in this paper, which employs the combination of a unique, inherently specific biometric parameter recognized and compared with stored data and at least one non-specific biometric parameters of a physiological characteristic recognized and contrasted with physiological norms.
Abstract: A personal, biometric authentication system is disclosed. The system can be used for controlling access to equipment or physical facilities. The system employs the combination of a unique, inherently specific biometric parameter recognized and compared with stored data and at least one non-specific biometric parameter of a physiological characteristic recognized and compared with physiological norms. Positive comparison results in authentication of an individual that is not incapacitated, dismembered, or deceased.