A Novel Privacy-preserving User Authentication Protocol for Big Data Environment

Jiabing Liu ； Xudong He ； Huoye Tang ； Dejun Wang ； Bo Meng

《International Journal of Network Security》 23卷3期 (2021/05) Pp. 436-448

https://doi.org/10.6633/IJNS.202105_23(3).08

摘要

Many authentication protocols use private information as a factor to implement user authentication. The authentication server can obtain user private information. Therefore, there exists a risk of privacy leakage with the rapid development of data mining technology. Hence, it's important to protect privacy in the authentication protocol. In this paper, we first model the PPMUAS (privacy-preserving remote user authentication protocol) protocol using Applied PI calculus and analyze it with ProVerif (Protocol Verifier). We found that it has three vulnerabilities. And then, we propose the PPUAPBDE protocol (privacy-preserving user authentication protocol for big data environment), which uses signcryption, homomorphic encryption, and fuzzy hash to protect user privacy of multi-behavior features. After that, PPUAPBDE is modeled using Applied PI calculus and analyzed with ProVerif. The result shows that it achieves confidentiality, authentication, and privacy. Finally, we develop an authentication system based on PPUAPBDE to evaluate Recall(recall) and FPR (false positive rate). The Recall is about 94.8%, and the FPR is 5.1%, which is better than PPMUAS.

關鍵字

Multi-behavior ； Authentication ； Privacy ； Fuzzy Hash ； Homomorphic Encryption