A Stubborn Security Model Based on Three-factor Authentication and Modified Public Key

Trung Thanh Ngo ； Tae-Young Choe

《International Journal of Network Security》 18卷6期 (2016/11) Pp. 1060-1070

https://doi.org/10.6633/IJNS.201611.18(6).07

並列摘要

Single authentication methods such as password, smart card, or biometric authentication suffer from their own weaknesses. Thus, combined authentication methods have been proposed recently. Unfortunately, even combined authentication methods are exposed to replay attacks, user impersonation attacks, server masquerading attacks, or stolen smart card attacks. To minimize the range of such attacks, we propose a security model that combines smart card authentication and biometric authentication using a modified public key cryptography. The modified public key cryptography transfers a public key only to the opposite entity not to public. The proposed security model can withstand the above-mentioned attacks. In particular, the insider attack can be resisted even in cases where the secret values stored in any two of three parties of a system are compromised. Such tolerance is enabled by modified public keys which are not revealed to the third party.

並列關鍵字

Biometric authentication ； modified public key signature ； smart card ； three-factor authentication ； threeentity security model