Identity Authentication System Based on Fingerprint Identification and Pulse Certification

Secure communication has achieved a new dimension with the advent of the schemes of quantum key distribution (QKD) as in contrast with classical cryptography, quantum cryptography can provide unconditional security. However, a successful implementation of a scheme for QKD requires identity authentication as a prerequisite. A security loophole in the identity authentication scheme may lead to the vulnerability of the entire secure communication scheme. Consequently, identity authentication is extremely important, and in the last three decades several schemes for identity authentication using quantum resources have been proposed. The chronological development of these protocols, which are now referred to as quantum identity authentication (QIA) protocols, is briefly reviewed here with specific attention to the causal connection involved in their development. The existing protocols are classified on the basis of the required quantum resources, and their relative merits and demerits are analyzed. Further, in the process of the classification of the protocols for QIA, it is observed that the existing protocols can also be classified in a few groups based on the inherent computational tasks used to design the protocols. Realization of these symmetries has led to the possibility of designing a set of new protocols for quantum identity authentication, which are based on the existing schemes for the secure computational and communication tasks. The security of such protocols is also critically analyzed.

With the help of the key technologies including the integrity verification, access control, and sealed storage, a kind of USB key-based approach for software protection is presented. At first, the integrity verification is used to protect the data consistency in USB key. Secondly, the mutual authentication is performed between the software and USB key to check the validity, in which identity authentication is based on the dynamic password technology. Lastly, the data is encrypted between the software and USB key using Triple DES, and the communication data is integrated with the MAC (message authentication code). Above all, the mutual authentication is to avoid the fake attack, the encrypted text is used for information hiding, the MAC is adopted to protect the communication text from being tampered, the dynamic password is used to prevent the replay attack. In addition, the play-and-plug USB interface is convenient to use.

This paper proposes a secure session key exchange and mutual authentication scheme between mobile machines in WLAN-based ad hoc networks. One of the main security challenges for secure machine to machine communication is to accomplish a simple and efficient session key exchange and mutual authentication. The main idea of this paper is that non-interactive session key exchange uses the mobile machine's ID and mutual authentication without communication with an authentication server whenever a data transmission occurs between the mobile machines. The proposed scheme is secure against man-in-the-middle attack, impersonation attack, and modification attack.

In radio‐frequency identification (RFID) authentication technology, the authentication schemes between reader and tag based on public‐key cryptography (PKC) are much better than those based on symmetric‐key cryptography in terms of expanding the scale of RFID applications and the style of providing service, while the limitation of resource consumption and computation capability of RFID tags makes it difficult to apply traditional PKC to RFID authentications. The cryptoGPS protocol based on PKC proposed by Mcloone and Robshaw suits low‐cost RFID system well, but it just achieves one‐way authentication, and the authentication times are very limited, which makes it vulnerable to coupons‐exhausted DoS attacks. To solve these problems, cryptoGPS protocol is greatly improved to realize the mutual authentication between RFID reader and the tag. In the improved protocol, a readers' public key distribution scheme is proposed to support the mutual authentication and a coupons updating algorithm is presented to resist the aforementioned DoS attack. Moreover, a modified Rabin encryption algorithm and a parameter generation method based on Low Hamming Weight technology are proposed to optimize the implementation of the proposed authentication protocol. And a feasible hardware structure of the protocol is also given. The protocol's simulation results show that the scheme just needs 3232 equivalent gates, and the maximum time of single step is 3.3 ms (500 k clock). The scheme is suitable for the low‐cost tags. Copyright © 2014 John Wiley & Sons, Ltd.

In cryptography, an identity authentication protocol can be used to identify the legitimation of users in communication. Usually, it is totally irrelative with key distribution protocol. From this point of view, we introduce a novel mutual identity authentication scheme on the basis of measurement-device-independent quantum key distribution (MDI-QKD) protocol, which utilizes the monogamous property of the Bell states. As a result, our proposed protocol can achieve identity authentication and key distribution in one round. Besides, we merge the estimation of error rate into the processing of identity authentication, it can make MDI-QKD more efficient. What's more, according to the simulation result, the protocol can work well in a noisy environment. Also due to the property of hash functions, it can be implemented efficiently with software.

With the rapid development of computer and network, new technologies and services such as mobile Internet, Internet of Things, cloud and artificial intelligence have arisen and changed people’s life. The identity authentication is a must for these services. To solve the problem, identity authentication system and method based on negative logic system (NLS) is proposed in the paper. NLS is introduced to improve security in the essence of attack and defense. Security mechanisms based on NLS are proved effective to increase attack cost and strengthen defense ability. So NLS-based identity authentication system and method in the cloud environment are designed. Meanwhile, the corresponding converters, distributed storage, distributed detectors and authentication are proposed. The proposed method can improve security and provide identity authentication for cloud, IoT, etc. The theoretical performance analysis proves that it is feasible and effective.

SM9 is an identity-based cryptography and constitutes an important part of Chinese commercial cryptography system. It can avoid the complicated PKI system certificate management problems and provides new solution for IoT (Internet of Things) security applications. But SM9 needs the trusted third party KGC (Key Generator Center) to generate and manage the key for the user. So, key update is very troublesome. In order to solve the problem of SM9 key update, this paper proposes a decentralized identity authentication and key management scheme using block chain technology. In the scenario, the user only needs the IGC (Identity Generator Center) to generate its identifier and the key for the first time. Then, the user can automatically update the key. In the process, identifier remains the same as public key and only the private key and parameters update, so it is quite convenient for identity authentication. This paper redefines data structure of the transaction and each key update process is recorded in the chain blocks in the form of transaction. The block chain can guarantee the security and reliability of key update process since it can’t be tampered with. The research in this paper is quite valuable for the identity authentication and key management in decentralized IoT application scenarios.

<p indent="0mm">Identity authentication plays a critical role in safeguarding communication information. In this study, we propose a semi-quantum mutual identity authentication protocol that leverages single particles as resources, significantly reducing quantum resource usage as well as system complexity and operational difficulty. The protocol operates without third-party involvement, simplifying the structure and enabling mutual authentication between quantum and classical participants through straightforward single-qubit measurement and reordering operations. Additionally, if the authentication process fails, the protocol can immediately identify which participant’s identity is unauthorized, thereby enhancing security. Security analysis demonstrates that the proposed protocol can defend against impersonation attacks, intercept-measure-resend attacks, entangle-measure attacks, and Trojan horse attacks. Compared to existing protocols, our protocol offers advantages in practicality.

Most blockchain-based identity authentication systems focus on using blockchain to establish the public key infrastructure (PKI). It can solve the problem of single point of failure and certificate transparency faced by traditional PKI systems, but there are still some problems such as complex certificate management and complex certificate usage process. In this paper, we propose an identity authentication scheme based on blockchain and identity-based cryptography (IBC). The scheme implements a decentralized private key generator (PKG) by deploying the smart contract in Ethereum blockchain, and uses the IBC signature algorithm and challenge-response protocol during the authentication process. Compared with other blockchain-based identity authentication systems, the scheme not only prevents the single point of failure, but also avoids the complex certificate management, has lower system complexity, and resists impersonation attack, man-in-the-middle attack and replay attack.

The ArgumentTwo parallel traditions have coexisted throughout the history of modern finger print identification. One, which gave more emphasis to the rhetoric of “science,” has always been somewhat troubled by the lack of an easily articulated scientific foundation for “dactyloscopy.” The other, more concerned with practicalities, was satisfied that the method of fingerprint identification appeared to “work” and that it won widespread legal acceptance. The latter group established conser vative rules of practice to guard against errors and preserve the credibility of latent fingerprint identification in the eyes of the law. The legacy of this history is coming home to roost today, as some latent fingerprint examiners (LFPEs) are beginning to argue that the traditional practice of latent fingerprint comparison lacks a scientific foundation appropriate to contemporary forensic science. This issue raises the question of what constitutes a “scientific” method for individual ized identification in a legal setting.

Benefiting from smartphones' powerful computing and sensing capabilities, biometric authentication is widely applied to them for conveniently verifying users' identities. However, most biometric features can be easily acquired or reproduced, making them vulnerable to replay and impersonation attacks. To address this issue, we propose DBreathLock, a non-contact deep breath-based authentication system that utilizes a smartphone emitting inaudible frequency-modulated continuous waves (FMCW)-based sonar signals and synchronously records breath sounds and sonar echoes of chest-abdominal-joint (C-A-joint) movements. Then, we implement a dual-protection barrier to defend against advanced replay attacks (ARAs). First, by analyzing the energy features of C-A-joint movements, we develop a Deep Breath Activity Detection method to detect deep breath fragments alongside the capability of resisting ARAs. Second, we take C-A-joint movements and smartphone vibrations caused by holding a smartphone as features and design a liveness detection mechanism to further fortify the resistance to ARAs. Furthermore, a multi-stream identity authentication model is designed to verify legitimate users by fusing biometric features from C-A-joint movements, deep breath sounds, and correlation sequences of both. Extensive real-world experiments with 40 users demonstrate DBreathLock's authentication accuracy of 95.97%. Additionally, it successfully defends against advanced replay, impersonation, simple hybrid, and advanced hybrid attacks, achieving the AUC of 0.9792, and FPRs of 2.17%, 2%, and 4.17%, respectively.

Previous studies with the title of the login authentication e-library with method of CBIR for matching face, have proved reaching the level of accuracy about 75%. This multiple verification of QR-code/QR-CMBS this process data among other things the identity ID, fingerprint patterns and pattern signatures. Each user can have a QR-CMBS, which is used to login to the e-library. This research-oriented system development with application authentication login with QR code/QR-QR, Data of the CMBS will store data from bineri identity ID, fingerprint patterns and pattern signatures.The advantage of Retrieval CBIR is the popularity and test result with a high degree of accuracy and time parameters. The results obtained from QR-CMBS every training, i.e. classify and determine the value of fingerprint patterns and signatures for each label. Feature extraction results are temporarily stored in the session database and compare the features that are stored in the database image classification. The most similar classification results will be displayed, i.e. QR-CMBS, fingerprints and signatures, as well as verification of login. The application login authentication system of e-library uses to calculate the similarity of this research, will be able to extract the feature of colour, texture and edge of a multiple verification of QR-code/ QR-CMBS, fingerprint and signature by using the Prewitt gradient. The result of the extraction process feature is then used by the software in the learning process and calculates the similarity. Learning image contained in 3 classes features a picture that is stored in the database query 100 png images and the image of the sample test with the size 400 x 400. The results showed that the combination of the Prewitt filter extraction gradient magnitude. Verification data classification compared to the three classes, namely QR-CMBS, fingerprints and signatures contained in the database. Response time to find the most CMBS-QR is similar to 10 sample data, giving the effect of a higher degree of accuracy that is 97%.

As a key component of sea transportation, the cruise ship industry has particular requirements for identity management and authentication systems which balance the need for security, operational efficiency, and a customized experience for each traveler. Traditional methods of identification are proving inadequate with rising passenger numbers, complexities associated with international travel, an increase in the scrutiny afforded to maritime security, and issues of privacy data concerns. The scope of this research focuses on creating sophisticated systems of identity management and authentication tailored to cruise ship passengers. With a focus on maritime applications, this study analyzes the biometric measurements, smart RFID cards, and mobile phone-based authentication systems employed at the port terminals, gangways, onboard access, and excursion control for various maritime peering interfaces. This paper combines existing literature, analyses other modes of transport, and studies selected cases from the maritime industry to determine the best integrated design solutions for the cruise environment which incorporate the identified gaps. The goals of the findings are to improve operational efficiency, enhance compliance with security regulations under the ISPS Code, and increase the safety and satisfaction levels of passengers traveling by sea.

At present, unmanned aerial vehicles (UAVs) have been widely used in civilian fields (such as smart cities). However, the external environment of the UAV network is complex and computing resources are limited, so it is vulnerable to serious security threats, such as replay attacks, forgery attacks, man-in-the-middle attacks. Seriously, it will cause great damage to the work of the UAV in smart cities. Aiming at the problem of transmission instruction data leakage caused by malicious UAV in communication between road base stations and UAVs, this paper proposes a lightweight identity authentication scheme based on elliptic curve cryptography (ECC). The purpose is to ensure the identity authentication of the UAV and the road base station, to ensure that the mission instructions received by the UAV are authentic and reliable, and to ensure the privacy of the UAV's identity information. The algorithm mainly includes the system initialization phase, initializing the UAV and road base station, and the identity authentication phase. Compared with the traditional identity authentication method, this method has the characteristics of low computational cost, short key and high security, and is more suitable for UAV communication.

In today's society, the rapid development of the Internet makes People's Daily life become more intelligent and diversified. Today's society has entered a multifaceted era where everything is interconnected. Artificial intelligence technology is gradually replacing some traditional human services, such as intelligent robot customer service instead of traditional human customer service, intelligent face scanning security check in railway stations instead of traditional manual ticket checking, unmanned supermarket automatic checkout has liberated some social labor costs. All these changes are the result of the development of artificial intelligence technology in today's society. In recent years, unicorn startups focused on biometrics have sprung up all around us, such as BTU and its MEG VII (Face ++). Thanks to the development of Internet and artificial intelligence technology, in many application fields, the traditional access control and identity authentication technology based on password verification is gradually transforming to the scheme based on biometric identification verification. Secure identity authentication is very important to the application of Internet. Face recognition is the most popular technology among all biometric identification technologies. In the field of biometric identification technology, it has become the most widely used technology in the field of identity authentication because of its unique non-invasive, support for infrared and visible light, no need for user cooperation and many other advantages. In the field of education, examinee identification, pedestrian identification detection at the entrance of railway stations, face electronic payment, intelligent video surveillance system, intelligent attendance and access control system, intelligent unmanned supermarkets and customs clearance ports become the pioneer fields of face recognition applications. It can be seen that the era of “national face brushing” has arrived, and the application of face recognition technology will only be more and more widespread in the current era and in the future. However, due to the sensitivity of biometric data and the heterogeneity and openness of network environment, the privacy leakage of biometric data is difficult to avoid. At present, fog computing and edge computing have been paid more and more attention in many fields. In the case that cloud service providers are unable to provide sufficient security, edge computing shows its advantages. In this paper, mobile edge computing is introduced for the first time into the face privacy protection identity authentication system based on cloud server outsourcing computing. It can not only greatly reduce the interaction frequency between users and cloud server, improve the availability and fault tolerance of the system, but also contribute to the implementation of privacy protection scheme. A deep constitutional neural network for face feature extraction is trained using deep learning framework Cafe. Cosine similarity is used to complete face verification. A privacy protection scheme based on the secure nearest neighbor algorithm is proposed, which can not only protect the security of the face feature data at the edge computing node, but also allow the edge computing node to complete the face recognition operation against the encrypted face feature data. In addition, the encryption scheme does not require large computing resources, and the accuracy of face recognition in cipher text is exactly the same as that in explain. At present, most of the solutions either have high computational complexity or poor security performance. How to reduce the computational complexity and improve the real-time performance of the system while ensuring the high security of the private data has important research significance and value. Therefore, in the cloud server outsourcing computing environment, how to complete biometric identification on the premise of protecting the privacy of biological data has become a research hot spot.