Earticle

블록체인 기술은 분산된 신뢰구조를 제공하고, 위변조가 불가능한 시스템 구현이 가능하고, Smart Contract 등 이 가능하면서 인터넷 차세대 보안 기술로 발전하고 있다. 블록체인 기술이 차세대 보안기술로 부각되면서 무결성 뿐만 아니라 인증을 비롯하여 다양한 보안 서비스에 대한 연구가 진행되고 있다. 인터넷 기반의 다양한 서비스는 패스워드 기반의 사용 자 인증으로 이루어지고 있지만 클라이언트나 네트워크에서 가로채기가 가능하고, 패스워드 정보가 저장된 서버가 해킹의 위험에 노출되어 있다. 따라서 무결성을 보장할 수 있는 블록체인 기반 기술과 OTP 기반의 안전한 인증 기법을 제안한다. 특히, 이중 인증(Two-Factor Authentication) 은 OTP 기반의 인증과 사용자가 가지고 있는 생체인증의 결합으로 패스워드 없이 안전한 인증이 가능하다. 제안기법은 인증에 필요한 생체정보를 식별할 수 없도록 다중 해시함수를 적용하여 트랜잭션 을 생성하여 블록에 담기 때문에 서버로부터 분리되어 서버 공격에 안전하다.

Blockchain technology provides distributed trust structure; with this, we can implement a system that cannot be forged and make Smart Contract possible. With blockchain technology emerging as next generation security technology, there have been studies on authentication and security services that ensure integrity. Although Internet-based services have been going with user authentication with password, the information can be stolen through a client and a network and the server is exposed to hacking. For the reason, we suggest blockchain technology and OTP based authentication mechanism to ensure integrity. In particular, the Two-Factor Authentication is able to ensure secure authentication by combining OTP authentication and biometric authentication without using password. As the suggested authentication applies multiple hash functions and generates transactions to be placed in blocks in order for biometric information not to be identified, it is protected from server attacks by being separate from the server.

생체정보는 저장, 암기, 손실 우려가 없고 도용이 불가능하다는 점에서 패스워드, PKI 등 기존 인증 방법의 대체 수단으로 주목받고 있지만, 개인정보 유출로 인한 프라이버시 침해가 발생한다. 이러한 취약점을 극복하고자 FIDO에서는 생체정보를 사용자 디바이스에 보존하여 인증하는 방식을 사용하여 서버에서의 개인정보 유출 문제를 해결하였다. 본 논문 에서는 국내·외에서 활발히 연구되고 있는 FIDO 환경에서 사용할 수 있는 다중 생체정보 인증 방법을 제안한다. 다중 생체정보를 이용하기 위해 지문과 뇌전도 신호를 뇌지문 정보를 생성하여 이를 FIDO 시스템에서 사용할 수 있는 방법을 제안한다. 제안 방법은 현재 기존 2-Factor 인증 체계의 한계로 인한 문제점을 다중 생체정보를 이용한 인증으로 해결할 수 있다.

Biometric information does not need to be stored separately, and there is no risk of loss and no theft. For this reason, it has been attracting attention as an alternative authentication means for existing authentication means such as passwords and authorized certificates. However, there may be a privacy problem due to leakage of personal information stored in the server. To overcome these weaknesses, FIDO solved the problem of leakage of personal information on the server by using biometric information stored on the user device and authenticating. In this paper, we propose a multiple biometric authentication method that can be used in FIDO environment. In order to utilize multiple biometric information, fingerprints and EEG signals can be generated and used in FIDO system. The proposed method can solve the problem due to limitations of existing 2-factor authentication system by authentication using multiple biometric information.

사물지능통신은 낮은 네트워크 비용과 범위에서 이점을 가지고 있다. 사물지능통신의 지능형 자동차는 구성요소와 망 규모의 비율로 차량간 위치에서 극심한 변화를 보여준다. 지능형 자동차는 무선 통신 기능으로 자동차 장치들 간에 정보를 교환하기 위해 차량 애드 혹 망에서 생체 정보를 통하여 안전성 제공을 요구한다. 본 논문은 자동차 이동시 자동차간의 상호 인증을 위해 생체 정보를 제공하는 기법을 제안한다.

M2M has shown the advantages of better coverage and lower network deployment cost. Intelligent vehicle section shows severe changes in position between vehicles and has numerous large scales of networks in its components, therefore, it is required to provide safety by exchanging information between vehicles equipped with wireless communication function via biometric information in VANET(Vehicular Ad hoc Network). This thesis is to propose scheme that mutually authenticates between vehicles by composing vehicle movement as biometric information.

과거의 오프라인에서만 이루어졌던 생활이 온라인에서의 활동으로 발전함으로 인해 온라인상에서 사용자가 올바른 사용자인지의 여부는 중요한 문제이다. 온라인상이나 나아가 일반 생활에서도 사용자 인증을 보다 정확하게 하기 위하여 생체인식 기술을 도입하고 있다. 생체인식 기술은 개인의 고유한 특징을 이용하여 인증을 수행하는 방 법으로 비밀번호를 대체하는 차세대 인증 기술로 각광받고 있다. 인간의 고유한 특징의 종류는 매우 다양하며 이러 한 특징을 추출하는 생체인식 기술도 다양한 장치와 알고리즘을 이용하여 이루어진다. 본 논문에서는 첫째로 이러한 다양한 장치인 스마트폰, 스마트와치, M2M 플랫폼을 분석하고 적용하였을 경우 어떤 효용성이 있는지 분석한다. 둘 째로, 다른 장치 플랫폼에서 포괄적인 인증인 효용성기반의 AIB를 제안한다. 제안 인증기법은 신체정보를 이용한 효 율적인 인증을 포함한다.

As the life which existed only offline has changed into a life part of which is led online, it is an important problem to identify whether an online user is legitimate one or not. Biometric authentication technology was developed to identify the user more correctly either online or in offline daily life. Biometric authentication is a technology where a person is identified by his or her unique characteristics, and is highlighted as a next-generation authentication technology replacing password. There are various kinds of traits unique to each individual, and biometric authentication technologies drawing on such traits use various devices and algorithms. Firstly, this paper classified such various biometric authentication technologies, and analyzed the effects of them when they are applied on smartphone, smartwatch and M2M of the different devices platforms. Secondly, it suggested the effectiveness-based AIB(Authentication for Integrated Biometrics) authentication technique, a comprehensive authentication technique, which can be used in different devices platforms. We have successfully included the establishment scheme of the effectiveness authentication using biometrics.

현재 국내에서 국민들을 식별하기 위해 사용되는 주민등록증은 지문정보를 구체적으로 표시하고 있어 도난당할 시 이를 활용한 2차 피해를 초례할 수 있다. 이러한 문제점을 해결하기 위해서는 식별정보에 기밀성을 유지하면서 비용측면의 만족해야하며, 현재 국가가 보유하고 있는 지문 DB를 활용할 수 있는 형태의 신분증이 요구되고 이다. 이러한 시점에서 암호화된 QR코드와 지문정보를 활용한 안전한 신분증 형태를 제안하고자 한다.

The registration cards that are currently used to identify the people of Korea may cause secondary damage once stolen because they contain very specifically expressed fingerprint information. In order to solve this problem, in ID is required that can utilize the state-owned fingerprint DB, while while maintaining confidentiality of the identification information and satisfying the cost as well. At this point accordingly, a secure form of ID, which uses the encrypted QR code and fingerprint information, is proposed.

IT와 융합한 지능형 자동차에 대한 연구가 현재 활발히 진행중이다. 안전한 지능형 자동차 서비스를 위해 다양한 통신 기술이 제공이 되고 있다. 지능형 자동차가 통신기술을 이용한 서비스가 제공되면서 다양한 보안위협 요소가 도출되고 있다. 지능형 자동차에서 보안 인증 솔루션을 위해서는 소유권, 지식, 생체정보를 포함하고 있어야 한다[6,7]. 본 논문에서는 지능형 자동차의 보안위협 요소를 분석하고 지능형 자동차의 보안 솔루션인 생체정보를 이용한 인증 기법을 제공한다. 기존의 지능형 자동차 인증보안 솔루션보다 높은 보안성을 갖는 구현의 문제점이 해결 되도록 사용자 생체인증기법을 제안한다.

Studies on the intelligent vehicles that are converged with IT and vehicular technologies are currently under active discussion. A variety of communication technologies for safety intelligent vehicle services are support. As such intelligent vehicles use communication technologies, they are exposed to the diverse factors of security threats. To conduct intelligent vehicle security authentication solutions, there are some factors that can be adopted ownership, knowledge and biometrics[6,7]. This paper proposes to analyze the factors to threaten intelligent vehicle, which are usually intruded through communication network system and the security solution using biometric authentication scheme. This study proposed above user's biometrics information-based authentication scheme that can solve the anticipated problems with an intelligent vehicle, which requires a higher level of security than existing authentication solution.

현재 IT기술과 자동차기술을 융합한 지능형 자동차에 대한 연구가 활발히 진행중에 있으며 많은 새로운 서비스 모델들이 개발중에 있다. 지능형자동차에 대한 개발이 활발하게 이루어지면서 무선 네트워크를 이용한 다양 한 서비스가 제공이 되고 있다. 이러한 지능형 자동차가 무선 네트워크를 이용한 서비스가 제동되면서 다양한 보안 위협 요소가 도출되고 있다. 본 논문에서는 지능형 자동차의 외부에서 네트워크에 침입하여 지능형자동차의 보안위 협 요소를 분석하고 지능형 자동차의 보안 솔루션의 인증 모델에 대한 기법을 제공하고자 한다. 인증 모델의 경우 신체의 고유성을 식별할 수 있는 생체인식을 이용한 인증기법을 제안한다.

Studies on the intelligent vehicles that are fused with IT and intelligent vehicle technologies are currently under active discussion. And many new service models for them are being developed. As intelligent vehicles are being actively developed, a variety of wireless services are support. As such intelligent vehicles use wireless network, they are exposed to the diverse sources of security risk. This paper aims to examine the factors to threaten intelligent vehicle, which are usually intruded through network system and propose the security solution using biometric authentication technique. The proposed security system employs biometric authentication technique model that can distinguish the physical characteristics of user.

Biometric performance improvement is a challenging task. In this paper, a hierarchical strategy fusion based on multimodal biometric system is presented. This strategy relies on a combination of several biometric traits using a multi-level biometric fusion hierarchy. The multi-level biometric fusion includes a pre-classification fusion with optimal feature selection and a post-classification fusion that is based on the similarity of the maximum of matching scores. The proposed solution enhances biometric recognition performances based on suitable feature selection and reduction, such as principal component analysis (PCA) and linear discriminant analysis (LDA), as much as not all of the feature vectors components support the performance improvement degree.

Biometric authentication systems have major security weaknesses: risk of biometric information leakage, unreliability of authentication modules, and non-transparency of biometric information management. This paper presents BDAS, a new biometric authentication system using blockchain, which provides a decentralized and distributed mechanism for processing biometric authentication and an auditable mechanism for managing biometric information. BDAS’s evaluation demonstrates that it provides reliable and secure authentication compared to existing methods while introducing negligible performance overhead in real-world scenarios.

On-demand ride services and the rideshare infrastructure primarily focus on the minimization of travel time and cost. However, the safety of riders is overlooked by service providers. For driver authentication, existing identity management methods typically check the driving license, which can be easily stolen, forged, or misused. Further, background checks are not performed at all; instead, social profiles and peer reviews are used to foster trust, thereby compromising the safety and security of riders. Moreover, the present mechanism seems ineffective in discontinuing a malicious driver from offering the services. In this paper, we present DriverAuth?a fully transparent and easy-to-use authentication scheme for drivers that is based on common behavioral biometric modalities, such as hand movements, swipes, and touch-strokes while the drivers interact with the dedicated smartphone-based application for accepting the booking. A preliminary study of behavioral biometric-based approaches offers a usable verification mechanism on smartphones that could be a potential solution to improve the safety of riders in the emerging on-demand ride and the rideshare infrastructure.

Gait-based classification has gained much interest as a possible authentication method because it incorporate an intrinsic personal signature that is difficult to mimic. The study investigates machine learning techniques to mitigate the natural variations in gait among different subjects. We incorporated several machine learning algorithms into this study using the data mining package called Waikato Environment for Knowledge Analysis (WEKA). WEKA's convenient interface enabled us to apply various sets of machine learning algorithms to understand whether each algorithm can capture certain distinctive gait features. First, we defined 24 gait features by analyzing three-axis acceleration data, and then selectively used them for distinguishing subjects 10 years of age or younger from those aged 20 to 40. We also applied a machine learning voting scheme to improve the accuracy of the classification. The classification accuracy of the proposed system was about 81% on average.

With the rapid growth in the development of smart devices equipped with biometric sensors, client identification system using biometric traits are widely adopted across various applications. Among many biometric traits, fingerprint-based identification systems have been extensively studied and deployed. However, to adopt biometric identification systems in practical applications, two main obstacles in terms of efficiency and client privacy must be resolved simultaneously. That is, identification should be performed at an acceptable time, and only a client should have access to his/her biometric traits, which are not revocable if leaked. Until now, multiple studies have demonstrated successful protection of client biometric data; however, such systems lack efficiency that leads to excessive time utilization for identification. The most recently researched scheme shows efficiency improvements but reveals client biometric traits to other entities such as biometric database server. This violates client privacy. In this paper, we propose an efficient and privacy-preserving fingerprint identification scheme by using cloud systems. The proposed scheme extensively exploits the computation power of a cloud so that most of the laborious computations are performed by the cloud service provider. According to our experimental results on an Amazon EC2 cloud, the proposed scheme is faster than the existing schemes and guarantees client privacy by exploiting symmetric homomorphic encryption. Our security analysis shows that during identification, the client fingerprint data is not disclosed to the cloud service provider or fingerprint database server.

Biometric authentication systems may suffer from decreasing recognition performance due to varying environmental conditions and sample ageing, which cause intra-class variability. Adaptive biometric authentication systems have been proposed to address these deficiencies by dynamically changing their sampling and recognition processes in response to changes in the operating environment. This paper provides the complete discussion on the design of an adaptive biometric authentication system through a systematic review of the existing literature to date. The review shows that further investigation is required to target mobile and/or wearable devices as well as to consider a continuous authentication methodology. In addition to this, the evaluation of adaptive biometric authentications with large-scale datasets is required to validate the feasibility of the system and its scalability in real-world with a comprehensive study of evaluation metrics.

Biometrics as a tool for information security has been used in various applications. Feature-level fusion is widely used in the design of multi-biometric systems due to its advantages in increasing recognition accuracy and security. However, most existing multi-biometric systems that use feature-level fusion assign each biometric trait an equal proportion when combining features from multiple sources. For example, multi-biometric systems with two biometric traits commonly adopt a 50?50 feature proportion setting, which means that fused feature data contains half elements from each biometric modality. In this paper, we investigate the impact of feature proportion on the matching performance of multi-biometric systems. By using a fingerprint and face based multi-biometric system that applies feature-level fusion, we employ a random projection based transformation and a proportion weight factor. By adjusting this weight factor, we show that allocating unequal proportions to features from different biometric traits yields different matching performance. Our experimental results indicate that optimal performance, achieved with unequal feature proportions, could be better than the performance obtained with the commonly used 50?50 feature proportion. Therefore, the impact of feature proportion, which has been ignored by most existing work, should be taken into account and more study is required as to how to make feature proportion allocation benefit the performance of multi-biometric systems.

바이오메트릭 정보를 이용한 인증방식은 사용자의 신체정보를 이용하여 신원을 확인 하고 시스템의 접근을 허가한 다. 요즘 들어, 패스워드나 보안토큰을 단독으로 이용하는 방식보다는 하나이상의 고유한 신체적, 행동적 형질에 기반 하여 개인의 생체 정보인 지문, 홍채 얼굴, 정맥 등을 활용하는 방식이 점차 증가하고 있는 추세이다. 2013년 Althobati 등이 WSN(Wireless Sensor Networks) 환경에 적합한 바이오메트릭 정보를 이용한 사용한 사용자 인증 스킴을 제안하 였다. 그러나 그들이 제안 프로토콜은 데이터 무결성에 대한 위협과 바이패싱 게이트웨이 공격에 취약하여 상호인증을 달성할 수 없었다. 본 논문은 이전에 제안된 논문의 취약점을 개선하여 WSN 환경에 적합한 안전한 프로토콜을 제안하였다.

Over recent years there has been considerable growth in interest in the use of biometric systems for personal authentication. Biometrics is a field of technology which has been and is being used in the identification of individuals based on some physical attribute. By using biometrics, authentication is directly linked to the person, rather than their token or password. Biometric authentication is a type of system that relies on the unique biological characteristics of individuals to verify identity for secure access to electronic systems. In 2013, Althobati et al. proposed an efficient remote user authentication protocol using biometric information. However, we uncovered Althobati et al.’s protocol does not guarantee its main security goal of mutual authentication. We showed this by mounting threat of data integrity and bypassing the gateway node attack on Althobati et al.’s protocol. In this paper, we propose an improved scheme to overcome these security weaknesses by storing secret data in device. In addition, our proposed scheme should provide not only security, but also efficiency since sensors in WSN(Wireless Sensor Networks) operate with resource constraints such as limited power, computation, and storage space.

Security is a primary concern in group communication, and secure authentication is essential to establishing a secure group communication. Most conventional authentications consist of knowledge-based and token-based methods. One of the token-based methods is a X.509 certificate, which is used under a Public Key Infrastructure (PKI); it is the most well-known authentication system in a distributed network environment. However, it has a well-known weakness, which only proves the belonging of a certificate. PKI cannot assure identity of a person. The conventional knowledge-based and token-based methods do not really provide positive personal identification because they rely on surrogate representations of the person’s identity. Therefore, I propose a secure X.509 certificate with biometric information to assure the identity of the person who uses the X.509 certificate in a distributed computing environment.

이 연구는 교도소에서 바이오메트릭 기술의 이용의 기본을 다룬다. 이를 위해 먼저 출입통제의 역사와 바이오메트릭 기술을 소개한다. 그리고 현재의 바이오메트릭 기술과 이것이 교도소의 작동을 어떻게 변화시키는지를 다룬다. 바이오메트릭 시스템을 현장에서 사용하는 것은 이 연구의 제 삼장에서 다룬다. 미래의 바이오메트릭 기술 및 기술의 발달과 함께 앞으로 교도소가 어떻게 변할지를 살펴보며 마무리 짓는다.

This paper addresses the basics of the use of biometrics in prison. It begins with a history of access control and the introduction of biometrics. It then addresses the current state of biometrics and how it is changing the way prisons are operated. Putting biometric systems into operation is the third section of the paper. It concludes with a look of the future of biometrics and how prisons maybe further changed with advancements in technology. The technological side of biometrics in prison has largely been proven successful. If there has been a failure in biometrics, it has typically come in the planning, testing, and installation of these systems. To ensure proper operation, and more importantly to ensure staff acceptance, proper planning and testing must go into implementing a biometric system. If a biometric system is properly designed, tested, and put into operation (along with proper training of staff), it can be expected to have a strong and positive influence on the efficiency and effectiveness of prison operations. The immediate future of security and access control in prisons appears to be inextricably linked with biometrics. Biometric tags are getting smaller, able to hold more information, and better able to be active rather than passive systems. This may mean that biometric systems may be placed in the body rather than on wristbands, further reducing the ability to tamper with the tags. Increases in facial and thumbprint recognition will likely increase the speed at which biometric systems will be able to process people at access point. We are very near a point where the whereabouts and access control of prisoners can be monitored and controlled 25 hours a day, seven days a week. Future advancements will strengthen that ability, and will add to the number of activities that can be made more efficient and more effective using biometrics.

The Metaverse, a rapidly evolving digital realm where people connect, collaborate, and engage in various activities, presents promising opportunities and, at the same time, raises significant security concerns. As users interact with diverse services, the need for a dependable method to confirm user identities becomes apparent. In light of current technology and the capabilities of biometrics, this paper explores the application of biometric authentication as a robust security solution within the Metaverse. Specifically, it investigates the practicality and effectiveness of biometric authentication methods, including facial recognition and iris scan, in preserving the integrity, confidentiality, and authenticity of interactions in the Metaverse. To illustrate our findings, we propose an authentication mechanism tailored for the Metaverse in response to the security challenges. To validate the feasibility and benefits of our approach, we conducted evaluations within an Apple Mac Mini environment, implementing biometric authentication in a simulated Apple Vision Pro. The outcomes of our study conclusively illustrate the security enhancements and advantages of our proposed authentication mechanism.

본 논문에서는 WMSN(무선 의료 센서 네트워크)을 위한 생체 인식 기반 인증 프로토콜의 보안 취약점을 분석하였다. 분석결과, 오프라인 비밀번호 추측, 위장 공격, 임시 비밀 유출 등의 취약점이 확인되었다. 이러한, 취약점을 개선하는 방법으로 솔트 암호화 해싱, 메시지 인증 코드, 디지털 서명, 개선된 키 합의 프로토콜 등 강화 된 전략을 제안하였다. 향후 리소스가 제한된 WMSN 환경에서 프로토콜의 견고성을 높이고 데이터 기밀성 및 무결성을 보장할 수 있는 고도화된 프로토콜의 개발이 요구된다.

This paper analyzes security vulnerabilities in a biometric-based authentication protocol for Wireless Medical Sensor Networks (WMSNs), identifying weaknesses like offline password guessing, impersonation, and ephemeral secret leakage. It proposes enhanced strategies, including salted password hashing, message authentication codes, digital signatures, and improved key agreement protocols, to bolster the protocol's robustness and ensure data confidentiality and integrity in resource-constrained WMSN environments.

The purpose of this study is to investigate the behavioral factors affecting the security attitude and intention to use biometrics password based on the protection motivation theory. This study also investigates security awareness training to understand trust, privacy, and security vulnerability regarding biometric authentication password. This empirical analysis reveals security awareness training boosts the protection motivational factors that affect on the behavior and intention of using biometric authentication passwords. This study also indicates that biometric authentication passwords can be used when the overall belief in a biometric system is present. After all, security awareness training enhances the belief of biometric passwords and increase the motivation to protect security threats. The study will provide insights into protecting security vulnerability with security awareness training.