A Three Factor Authentication System for Smartcard Using Biometric, Visual Cryptography and OTP

Visual cryptography is a powerful method for securely sharing and protecting visual data by splitting an image into multiple shares. Individual shares do not reveal any information, but when combined, they allow for the reconstruction of the original image. The survey categorizes different approaches based on pixel expansion, complexity, and the quality of the reconstructed image. It focuses specifically on color image encryption, an emerging field of interest because of its use in secure communication, digital media, and medical imaging. The paper provides a comprehensive review of recent advances in color visual cryptography, discussing the latest techniques and challenges in the field. his paper is a systematic review of color visual cryptography techniques. The contribution is threefold: (i) categorizing schemes by pixel expansion, complexity, and reconstruction quality, (ii) critically analyzing limitations and trade-offs, and (iii) identifying open research gaps and future directions.

Security in internet of things is very critical. The computer systems that use image acquisition and processing from onboard or remote systems need to secure image data over the internet. Security of multimedia image data transmitted over secured and unsecured communications channel in today’s cyberspace is of paramount consideration due to malicious activities over these channels and there has been a high demand especially for end to end security applications for mobile devices. This is to ensure safety and security as well as privacy to transmitted data and stored data in the clouds. In this paper, we proposed a hybrid approach for securing digital images for devices by engaging lossy compression using 2-D discrete cosine transform and Visual Cryptographic Technique. The DCT was used for the lossy compression process and the visual cryptography was used to encrypt the image for confidentiality. The results showed to be very effective and the implementation was done using MATLAB.

The rapid deployment of modern technologies such as iPhone, laptops, digital watch, social network, internet are resulted in handling of enormous amount of data in our day-to-day life. Since the data storage is increased abundantly and techniques to retrieve the relevant information and protection of data related issues to be focused efficiently to protect this big data. However various organisations and IT industries dealing with big data are faced with many security risks in storage and processing of data. Hence the protecting the big data is challenging task for the researchers. MapReduce is an efficient tool for processing large volume of data in a distributed environment. Security and secrecy of data are vital concerns while processing data carried out in MapReduce. In this article, the proposed secure data processing on big data using visual cryptography (SDPBDVC) technique ensures the protection of sensitive information by applying the visual cryptography technique and the processing done only by authorised entities.

A highly robust and secure image watermarking based on classification and visual cryptography

Smart cards and biometrics can be effectively combined for personal authentication over the open network. The combination is achieved as two-step authentications in which the smart card is authenticated based on a Public Key Infrastructure (PKI), and the card-holder is authenticated using the template stored in the smart card based on the biometrics verification. The biometrics verification has to be executed in the card for security purposes. This paper describes that one is fingerprint verification method that can be embedded in a smart card. And the other is biometrics-based personal authentication system in which a smart card, a PKI such as an X.509 certificate, and fingerprint verification technologies are combined.

RFID technology smart card has a wider user used in diverse area and application. Usually smart card system works by install a smart card reader at the entrance and connects through network which consist database and system application. Because the system required bigger database that stored staff information, cost of investment will be increase towards the system requirement. This is because usually the staff access can validate through authentication process that compare serial number and data on the card with a serial number stored on database. Embedded system by using rabbit microprocessor can reduce cost of system installation and easy to maintaining. By combining the rabbit 2000 microprocessor as controller the hardware and dynamic C as a software, both hardware and software design are easy to develop with the rabbit 2000 development kit. The development kit contain powerful single board computer called ldquothe jackrabbit boardrdquo that can help developer to write and test complex software and also will be able to prototype circuits that interface to a rabbit 2000 microcontroller. For this development kit we can built a embedded system that optimize their function by compare to conventional microcontroller that only doing specific task ,because several module of smart card application such as smart card module, lcd module, keypad module, buzzer module and electromagnetic lock module are easy to integrate. This paper proposes rapid embedded smart card system development by using rabbit 2000 microprocessor with dynamic C software. Verification and validation process will be study how the communication protocol layer handle the communication between rabbit 2000 and smart card reader.

The smart card is widely used in E-commerce. We describe the building of a smart card system with embedded biometrics data to strengthen security. First of all, we would like to make the in-card processor do the entire authentication and verification steps so that the card can encapsulate all the critical information, including the biometric data, and performs all the comparison securely inside the card without any data leaking out. However, knowing that the in-card processor has a limited computational power and storage, we would like to seek for a compromise in the time complexity and space complexity for conducting the biometrics comparison and storage entirely by smart card. A domain-specific fixed-point non-integral arithmetic for the card processor is derived as the smart card processor supports only integer arithmetic.

Visual cryptography (VC) technique encodes an image into two or more shares that appear random in human eyes. In the decryption section, the pixels in the shared images are combined to obtain the information contained in the original image. This study applies visual cryptographic techniques to graysle and color images for user authentication in online transactions using the VC2,2 scheme. The server computer encodes the CAPTCHA image into two shared images that are sent to the user through different channels or applications. To authenticate himself, the user performs an XOR operation on both share images, identifies the information contained in the CAPTCHA and sends it to the server. In encryption test, histogram of the share image has a different pattern from the original image. The description test shows the decrypted image in this study visually has a better quality than the binary image has better quality than binary images.

The traditional approach for programming smart cards does not allow the creation of downloadable executable code and requires programmers with experience in programming in low-level languages. This approach, associated with a high quality qualification process, produce secured smart card. Unfortunately, it does not allow card manufacturers and issuers to quickly respond to the market changes, and it limits the flexibility of smart card applications. Open smart card programming provides a more dynamic approach to card applications. High-level languages and security mechanisms are the basis for the programming of open smart cards. Most notable efforts towards such smart card systems are Java Card [22], MultOS [14] and Smart Card for Windows [15], which provide application developers an opportunity to develop rapidly applications. The main drawback with this kind of smart card is the risk to download a hostile application that will exploit a faulty implementation module of the platform. Security is always a big concern for smart cards, but the issue is getting more intense with multi-applicative platforms and post issuance code downloading. The correct design and implementation of the system is the key to shun such an attack. Fault prevention offers different techniques to remove latent errors from the system. The fault avoidance concerns methodologies and appropriate techniques to avoid the introduction of fault during the design and the construction of the system. In a first approach, one can believe that smart card can only get benefits of using formal methods.KeywordsVirtual MachineModel CheckerFormal MethodSmart CardLabel Transition SystemThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

많은 웹 서비스에서 편리성을 이유로 패스워드 기반 인증 시스템을 주로 사용한다. 패스워드 기반 인증 시스템은 패스워드 추측공격, 사전식 대입공격, 키 로깅 공격 등 다양한 공격에 취약한 것으로 알려져 왔다. 뿐만 아니라 대부분 웹 기반 인증 시스템은 서버가 사용자를 인증하는 단방향 인증만을 제공하므로 사용자는 현재 접속하여 비밀 정보를 남기고자하는 서버가 적합한지 검증 할 수 없다. 따라서 DNS 스푸핑 공격이나 피싱, 파밍과 같은 공격에 대응하기가 어렵다. 이러한 웹 서비스의 보안 취약점을 개선하기 위해 OTP를 사용하거나 패스워드 길이를 증가시키고, 특수기호를 포함하는 패스워드를 생성하게 하는 방안들이 적용되고 있다. 그러나 OTP 장치의 구입비용 발생, 복잡한 패스워드로 인한 사용자의 편리성 저하 등 실용성의 문제가 있다. 무엇보다 단방향 인증 기반에서는 여전히 취약점이 존재한다. 이를 해결하기 위해 본 논문에서는 QR-Code를 활용한 다중채널, 다중요소 인증시스템을 제안한다. 제안하는 시스템은 상호 인증을 제공하여 피싱이나 파밍과 같은 공격에 대응할 수 있다. 또한 휴대용 스마트 기기를 OTP 생성기로 활용하여 사용자의 편리성을 보장하면서 기존 패스워드 공격들에 대응할 수 있다. Password based authentication systems are most widely used for user convenience in web services. However such authentication systems are known to be vulnerable to various attacks such as password guessing attack, dictionary attack and key logging attack. Besides, many of the web systems just provide user authentication in a one-way fashion such that web clients cannot verify the authenticity of the web server to which they set access and give passwords. Therefore, it is too difficult to protect against DNS spoofing, phishing and pharming attacks. To cope with the security threats, web system adopts several enhanced schemes utilizing one time password (OTP) or long and strong passwords including special characters. However there are still practical issues. Users are required to buy OTP devices and strong passwords are less convenient to use. Above all, one-way authentication schemes generate several vulnerabilities. To solve the problems, we propose a multi-channel, multi-factor authentication scheme by utilizing QR-Code. The proposed scheme supports both user and server authentications mutually, thereby protecting against attacks such as phishing and pharming attacks. Also, the proposed scheme makes use of a portable smart device as a OTP generator so that the system is convenient and secure against traditional password attacks.

Recently a number of phishing attacks are increasing more and more. Hence there is a need for efficient mechanism for the prevention of phishing. In this paper, Cryptography and authenticating along with dynamic OTP has been proposed to recognize the whether the site is safe or unsafe to carry out transaction.

By splitting a picture into many parts, which, when reassembled, disclose the original image without requiring complicated math, visual cryptography is a strong method for protecting visual information. Problems with pixel enlargement, decreased picture quality, and restricted access structures are common with traditional visual cryptography techniques. Our proposed improved visual cryptography approach incorporates pixel-wise operations and critical access structures to solve these challenges and increase flexibility, picture quality, and security. To reconstruct a picture, our technique calls for building visual cryptographic shares based on critical access structures that specify the exact combinations of shares needed. In order to maintain the image's resolution and reduce pixel expansion, we use pixel-wise processes. By improving the peak signal-to-noise ratio (PSNR) by up to 20% compared to conventional approaches, experimental data show that our strategy greatly improves picture quality. In addition, the suggested approach guarantees that individual shares do not disclose any information on the original picture, thereby maintaining high security requirements. Finally, it is clear that the enhanced visual cryptographic system is well-suited for a wide range of uses in safe communications and data security due to its strong solution for secure picture sharing, increased picture quality, and adjustable access control.

The backdrop: visual cryptography represents a contemporary encryption technology valued for its ease of implementation and comprehensibility, eliminating the need for a secure channel for key transmission and similar requirements. This paper aims: delve into the diverse methods employed in optical encryption, exploring their advantages and drawbacks, with a particular focus on image encryption techniques and the outcomes documented in various research studies. The objective is to identify the strengths and weaknesses inherent in these methodologies, paving the way for potential solutions in the future of optical encryption research. Notably, challenges persist in effectively handling color images and utilizing multiple shares (n, n), impacting both the security and the restoration aspects. The time computation aspects, encompassing creation, encryption, and restoration of these shares, also present challenges. Consequently, ongoing improvements are necessary to address these intricacies and enhance the robustness and applicability of visual cryptography technologies in diverse contexts

One of the critical steps in designing a secure biometric system is protecting the templates of the users. If a biometric template is compromised, it leads to serious security and privacy threats because unlike passwords, it is not possible for a legitimate user to revoke his biometric identifiers and switch to another set of uncompromised identifiers. This work propose a new cancelable biometric template using visual cryptography (VC) for preserving privacy to biometric data such as finger-vein. The finger vein template is divided into two noisy images, known as shares, using VC, where one share is stored in the system database and the other is kept with the user on a smart card. The private image can be revealed only when both shares are simultaneously available at the same time. The individual share images do not reveal the identity of the private image. We experimentally evaluate performance of the proposed scheme. The evaluation is performed based on the two metrics: (i) False Acceptance Rate (FAR), and (ii) False Rejection Rate (FRR).

The combination of smart cards and biometrics results in a strong 2-factor authentication. It facilitates a trusted credential for authenticating an individual's identity through one-to-one biometric verification using the smart card token. Fingerprint Authentication Systems (FASs) embedded in smart cards are gaining massive acceptance as it offers a superior level of security when compared to the conventional Match-on-Device (MOD) and Match-on-Server (MOS) technologies. The fundamental difference between the conventional FAS authentication process and FAS using smart card process is all about the authentication location. FAS authentication using smart card token is possible through four authentication approaches. They are the Template-on-Card (TOC), Match-on-Card (MOC), Work-Sharing On-Card (WSOC), and System-on-Card (SOC). Out of these four approaches, the SOC is considered as the most secure and expensive, whereas the TOC is considered as the least secure and least expensive. The MOC scheme offers a higher level of security than the TOC scheme at an affordable cost when comparing to SOC and is thus the most practical solution available today. Although this is the case, the MOC scheme is also susceptible to the inherent security vulnerabilities associated with biometric modalities in general. The front runner of the biometric vulnerabilities being the compromise of the original finger templates. This paper focuses on this critical vulnerability aspect and conceptualizes a novel Match-on-Card Fingerprint Authentication System. The proposed system does not need to store or transfer the original fingerprint template to/from the smart card and therefore facilitates an enhanced security than the conventional MOC approach