Using Fingerprint Recognition in a New Security Model for Accessing Distributed Systems

For over a century, fingerprints (FP) have been considered one of the most highly used methods for human recognition; automated biometric systems have only been available in recent years. FP recognition is becoming indispensable part of many identification systems in the world. This research present a proposed authentication system based on FP as biometric type and some of static credential personal information such as name and address date. The system generates a Unique Identification Number (ID) by combining FP features with user's personal information for accessing the system. One-to-one and one to more verification is used to verify user's identity for the application with high security level. The design model has been trained and tested using DB consisting of 100 images with selected FP's images for 30 persons. Result of FPs Matching rate is (100%) for end point by using SVM algorithm. The experimental work of the proposed system in this paper is that implementing a fingerprint-based investigation system for the Iraq country. The software was designed using Visual Studio 2013, ASP.net with C#, SQL server 2012, Windows Server 2012, and Microsoft Access 2010 programming language.

The increasing reliance on web applications across domains such as e-commerce, banking, healthcare, and enterprise systems has significantly amplified the importance of secure and reliable authentication mechanisms. Traditional password-based authentication methods are increasingly vulnerable to modern cyber threats, including phishing, brute force attacks, and credential stuffing, thereby necessitating the adoption of more advanced and robust authentication strategies. This study presents a comprehensive comparative analysis of modern authentication mechanisms in web applications, including Multi-Factor Authentication (MFA), OAuth 2.0, JSON Web Tokens (JWT), Single Sign-On (SSO), and biometric-based authentication systems. The research evaluates these mechanisms based on critical parameters such as security strength, usability, scalability, performance, and implementation complexity. It further examines architectural models, token-based frameworks, and federated identity systems that support secure user authentication in distributed environments. Additionally, the study reviews common vulnerabilities, threat mitigation techniques, and real-world deployment scenarios to assess the effectiveness of each approach. The findings highlight a growing shift toward hybrid authentication models that integrate multiple techniques to achieve enhanced security and user experience. However, challenges remain in balancing security with usability, ensuring interoperability across platforms, and maintaining privacy in decentralized systems. The paper concludes by identifying future research directions focused on passwordless authentication, zero-trust security models, and adaptive authentication systems for next-generation web applications.Keywords : Authentication mechanisms, Web application security, Multi-Factor Authentication (MFA), OAuth 2.0, JSON Web Tokens (JWT), Single Sign-On (SSO), Biometric authentication, Passwordless authentication, Zero Trust security, Cybersecurity

Communication between connected objects in the Internet of Things (IoT) often requires secure and reliable authentication mechanisms to verify identities of entities and prevent unauthorized access to sensitive data and resources. Unlike other domains, IoT offers several advantages and opportunities, such as the ability to collect real-time data through numerous sensors. These data contains valuable information about the environment and other objects that, if used, can significantly enhance authentication processes. In this paper, we propose a novel idea to building opportunistic sensor-based authentication factors by leveraging existing IoT sensors in a system of systems approach. The objective is to highlight the promising prospects of opportunistic authentication factors in enhancing IoT security. We claim that sensors can be utilized to create additional authentication factors, thereby reinforcing existing object-to-object authentication mechanisms. By integrating these opportunistic sensor-based authentication factors into multi-factor authentication schemes, IoT security can be substantially improved. We demonstrate the feasibility and effectivenness of our idea through illustrative experiments in a parking entry scenario, involving both mobile robots and cars, achieving high identification accuracy. We highlight the potential of this novel method to improve IoT security and suggest future research directions for formalizing and comparing our approach with existing techniques.

This document describes two authentication mechanisms created by Sun Microsystems that are commonly used in conjunction with the ONC Remote Procedure Call (ONC RPC Version 2) protocol. WARNING The DH authentication as defined in Section 2 in this document refers to the authentication mechanism with flavor AUTH_DH currently implemented in ONC RPC. It uses the underlying Diffie-Hellman algorithm for key exchange. The DH authentication defined in this document is flawed due to the selection of a small prime for the BASE field (Section 2.5). To avoid the flaw a new DH authentication mechanism could be defined with a larger prime. However, the new DH authentication would not be interoperable with the existing DH authentication. As illustrated in [10], a large number of attacks are possible on ONC RPC system services that use non-secure authentication mechanisms. Other secure authentication mechanisms need to be developed for ONC RPC. RFC 2203 describes the RPCSEC_GSS ONC RPC security flavor, a secure authentication mechanism that enables RPC protocols to use Generic Security Expires: November 17, 1999 Informational [Page 1]^L INTERNET-DRAFT Authentication Mechanisms for ONC RPC 18-May-99 Service Application Program Interface (RFC 2078) to provide security services, integrity and privacy, that are independent of the underlying security mechanisms. Expires: November 17, 1999 Informational [Page 2]^L INTERNET-DRAFT Authentication Mechanisms for ONC RPC 18-May-99 CONTENTS

The technological development of artificial intelligence, Internet of Vehicles, big data, edge computing, intelligent manufacturing, 5G and other technologies will bring great prospects to the popularization of the Internet of Things. In the future, we will see more and more IoT systems of different sizes. It is particularly important to ensure the control of IoT system message transmission, ensure system security, and monitor IoT systems. The Internet of Things protocol and its system node authentication mechanism have great research value. This paper analyzes the MQTT protocol and its security authentication mechanism, and designs and implements an identity authentication mechanism based on historical information nodes. The proposed authentication mechanism can effectively prevent forgery attacks, counterfeit attacks, replay attacks, and Sybil attacks.

Wireless Sensor Networks are being widely used in many real time applications that require continuous monitoring and maintenance of surroundings and their environment. Communication is a vital operation in WSN and most of the times the data is confidential. Hence, security of data is a major concern in WSN and it has been observed that a secure authentication mechanism will ensure confidentiality and integrity of data in WSN. Many authentication mechanisms have been designed but most of them require the sensor nodes to have much computational resources, involves much communication and storage overheads and are quite complex. In this paper, we propose a simple, secure, dynamic, scalable, efficient and lightweight protocol for mutual authentication of nodes in WSN. The protocol is based on tokens, each sensor node acquires a token from base station (BS) and later on without any involvement of BS sensor nodes mutually authenticate each other using acquired tokens. The proposed protocol was modeled in scyther for verification and no potential attacks were detected.

Enterprise Java applications form the backbone of many mission-critical systems in sectors such as healthcare, finance, and government. With increasing security threats targeting these applications, a comprehensive understanding of Java-based security frameworks and authentication mechanisms is essential. This paper presents an in-depth exploration of contemporary security frameworks in the Java ecosystem, such as Spring Security, Apache Shiro, and Jakarta Security. It also analyzes various authentication mechanisms, including Basic Auth, OAuth2, JWT, SAML, and mutual TLS (mTLS), and their suitability for enterprise deployment. Furthermore, the paper delves into threat modeling techniques such as STRIDE and OWASP Top 10 vulnerabilities relevant to Java applications. A case study of a Hospital Management System (HMS) demonstrates the practical application of layered security strategies using modern frameworks and secure coding practices. The paper concludes with a discussion on emerging challenges, such as API-level threats, and offers future research directions. The goal is to provide a holistic reference for developers, architects, and security analysts working on Java enterprise applications.

The energy-constrained devices such as the mobile terminals and nodes of the Internet of Things make lightweight security schemes an urgent need. The traditional identity authentication techniques can provide protection for the user's privacy and information to a certain extent, but they suffer from heavy cost. Non-cryptographic authentication mechanisms based on the physical layer characteristics are new techniques, which have a higher security level. The recognition technique of radio transmitter based on radio-frequency fingerprint ( RFF ) is one of the non-cryptographic authentication techniques. The authors propose a lightweight one-time password (OTP) authentication scheme based on RFF (RFF-OTP), which is a novel cross-layer secure authentication scheme and can provide mutual authentication between the mobile terminal and server, by combining RFF recognition algorithm with a hash encryption algorithm. By theoretical analysis and Syverson and van Oorschot logic verification, they prove that the RFF-OTP scheme is simple, efficient, flexible and independent of trusted-party while it also can resist the cloning attack and satisfy the anonymity compared with the OTP authentication scheme. Besides, it only requires the password to log into the system in the authors' scheme in comparison to the OTP scheme that needs both ID and password for the same purpose.

The metaverse is a new virtual world that has the potential to significantly impact our interactions with digital content and with each other. It is a shared virtual environment where users can seamlessly and with immersive experiences create, interact, and enjoy digital assets. Nevertheless, the metaverse also poses fundamental challenges, particularly about security and privacy concerns, that require careful consideration. One of the most daunting aspects of securing the metaverse is authentication. Several solutions have been proposed, including deployment of blockchain technology and smart contracts, to address these authentication challenges. While these methods provide a secure and tamper-proof authentication mechanism, they fail to meet certain critical security and privacy requirements like interoperability and decentralization. This research proposes an enhanced privacy-preserving authentication scheme based on blockchain, elliptic curve cryptography, biohashing, and a physical unclonable function that guards against various attacks. The proposed scheme does not rely on a single central authority and consists of various phases, including user and avatar authentication, password change, and avatar generation phases. The proposed scheme underwent security assessment using the Burrows Abadi Needham (BAN) logic, ProVerif tool, and Scyther tool. The results demonstrate that it provides a better level of security against a wide range of attack vectors. The proposed scheme offers a swift and efficient authentication mechanism that adheres to the requirements of the metaverse environment, such as interoperability, decentralization, and privacy protection, and requires less computation cost as compared to state-of-the-art schemes.

Handwritten signature verification is a critical aspect of personal authentication in numerous sectors, including banking, legal, and access control systems. This paper provides a comprehensive investigation into writer-dependent signature verification techniques, spanning from traditional approaches such as Histogram of Oriented Gradients (HOG) and Scale-Invariant Feature Transform (SIFT) to cutting-edge deep learning architectures like Siamese and triplet networks. Through extensive experimentation and meticulous analysis conducted on benchmark datasets, we rigorously compare and evaluate the efficacy of these approaches. Our study reveals intriguing insights into the performance characteristics of different methodologies, shedding light on their strengths, weaknesses, and areas for improvement. Notably, we observe that while traditional feature-based methods excel in capturing discriminative information from signature images, deep learning architectures offer enhanced flexibility and adaptability, particularly in scenarios with large and diverse datasets. By combining the strengths of both paradigms, we demonstrate the potential for building robust and reliable signature verification systems capable of handling real-world challenges and variations. We highlight the importance of carefully curated datasets and well-designed network architectures in achieving optimal results, thereby providing valuable guidelines for practitioners and researchers in the field. In conclusion, this study contributes significant insights to the advancement of handwritten signature verification systems, emphasizing the importance of leveraging both traditional methodologies and modern deep learning techniques for building secure and dependable authentication mechanisms. By addressing key challenges and exploring novel approaches, our research aims to foster innovation and enhance the security measures associated with handwritten signature authentication in diverse applications. Keywords—Handwritten signature verification, Writer-dependent approach, Feature-based methods, Deep learning, Siamese networks, Triplet networks, Benchmark datasets, Performance evaluation, Authentication mechanisms, Security measures.

The distinguishing feature of a metasystem is middleware that facilitates viewing a collection of large, distributed, heterogeneous resources as a single virtual machine, where each user of the metasystem is identified by a unique metasystem-level identity.The physical resources of the metasystem can exist in multiple administrative domains, each with different local security requirements and authentication mechanisms (e.g., Kerberos, publickey).The problem this paper addresses is how to map the metasystems-level identity to an appropriate account on each local physical machine for the purposes of process creation, such that the access control and authentication policies of each local machine are not violated.This mapping must ensure the integrity of the local machines, must ensure the integrity of the metasystem user's data, and must not unnecessarily burden either the metasystem users, the metasystem system administrator, or the local machine system administrators.Specific examples are drawn from experiences gained during the deployment of the Legion metasystem.For example, Legion configurations for local sites with different access control mechanisms such as standard UNIX mechanisms and Kerberos are compared.Through analysis of these configurations, the inherent security trade-offs in each design are derived.These results have practical importance to current and future metasystem users and to sites considering any future inclusion of local resources in a global virtual computer.

Due to the rapid growth in sensor technology and embedded technology, wireless body area network WBANs plays a vital role in monitoring the human body system and the surrounding environment. It supports many healthcare applications on the one hand and are very much help full in pandemic scenarios. It has become the most innovative health care area, which is intriguing to many researchers because of its vast future prospective and potential. Data collected by different wireless sensors or nodes is very personal, critical, and important because of human life involvement. WBANs can minimize human to human contact, which helps stop the spread of severe infectious diseases. The biggest concern is the maintenance of privacy and accuracy of data is still a hot area of research due to nature of attacks, which are changing day by day and increasing, as well as for the sake of better performance. A suitable security mechanism is a way to address above issues, for achieving data security, it is expedient to propose a mechanism. It is essential to update the patient’s regular data. WBANs help to deliver truthful reports related to the patient’s health regularly and individually. This paper proposes an algorithm that shows a better result than the existing algorithm in their previous works. This work is all about proposing a mechanism which needs comparatively less resource. Only authentic entities can interact with the server, which has become obligatory for both sides, keeping data safe. Several authentication schemes have been proposed or discussed by different researchers. This paper has proposed a Secure and Efficient WBANs Authentication Mechanism (SEAM). This security framework will take care of the authentication and the security of transmitted data.

Blog services become popular in recently years. Web users can post their articles through the services. On the other hand, the users do not have full control of the articles after posted while the services are built with client/server model. Therefore, we propose to use peer-to-peer (P2P) technology to establish blog services. However, the anonymous feature disables the P2P technology to conduct user identification. The OpenID provides secure and unified authentication mechanism to improve the anonymity. In addition, the OpenID has the single sign on procedure to reduce redundant, multiple accounts and passwords. The paper presents a blog service platform which integrates the P2P networks and the OpenID authentication mechanism together. Therefore, user scan establish their own blogs easily with full control. The platform can be utilized for other Internet applications as well.

최근 인터넷이 웹 2.0 시대에 들어서면서부터 페이스북, 트위터, 유튜브 등과 같은 많은 소셜 네트워크 서비스들이 생겨났다. 이를 통해 사용자들은 온라인 상에서 다른 사용자들과 관계를 맺고 그룹에 가입할 수 있으며 타인의 생활을 실시간적으로 확인할 수 있다. 하지만 무방비한 온라인 상의 정보 노출은 악의적인 사용자들로 하여금 쉽게 타인의 개인정보를 수집하고 이용할 수 있게 만들 수 있다. 이에 본 논문에서는 개인 정보의 남용을 방지하고 권한이 부족한 사용자들이 타인의 개인 정보에 접근하는 것을 제어하기 위한 접근 제어 메커니즘을 제안한다. 본 논문에서는 제안하는 접근 제어 메커니즘은 마스터키를 핵심키와 부분키로 구분하고, 요청자의 평판도에 따라 접근 권한을 제한하는 특징을 가지고 있다. 이러한 제안 접근 제어 메커니즘의 성능 분석을 위해 기존 소셜 네트워크에서 고려하는 정보 보호 메커니즘과의 성능을 비교 분석한 결과 복잡도와 계산 시간 소모량 그리고 키 관리의 안전성 측면에서 성능 향상이 가능함을 확인할 수 있었다. Recently, as Internet enters WEB 2.0, many social network services through such as Facebook, Twitter and Youtube appeared. In these social network sites, users can easily make friends, join groups and access others personal information. Therefore, a malicious user can easily gather information of others. In order to protect user's personal information from the unauthenticated users, we propose privacy protection mechanism based on key assignment and user's trust level. A master-key is generated for each users and is segmented into a core-key and several sub-key. The master-key stores at the information owner's side and the sub-key will be distributed to requestor according to the relation and trust level. At last, in order to proof the efficiency, the performance of our proposed mechanism is compared with those of existing mechanisms.

Broadcast Communication is crucial in VANET communication, to send and receive safety messages within network. Securing these beacon message is a challenge, since they are very prone to clone and Sybil attacks. Many works have been proposed to address this problem but they failed to address how to detect and protect these messages from clone attacks and also limited to static networks with limited data sizes. To achieve this a secure authentication and attack detection mechanism can be designed. In this paper we propose a secure broadcast message authentication and attack detection mechanism with Identity – Based Signatures. Experimental results proved that it can be used in both V2V and V2RSU c communications. Our scheme shown best performance compared to existing schemes in terms of packet delivery ration, detection rate and detection time.