Improvement of Digest Based Authentication Scheme for Biometric Verification Normally, authenticating a system in an untrusted environment is performed through mechanisms such as identification card, password checking and etc. However, by the development of technology, cracking such systems through forging password or stealing identification card may be done leading to the lack of security and hence privacy. This is why biometric based authentication systems are appropriate offer to provide security of clients. Through such systems, clients are verified and permitted to login to the system according to their physical or behavioral traits. Biometric systems offer several advantages over traditional authentication methods. Moreover, these systems, protects the privacy of clients, confidentiality and integrity of critical information for emerging technology such as smartphones and other appliances. In this paper, we improved our previous biometric authentication system and through some practical scenarios, we considered different attacks from client, server, and network sides to intrude into the privacy. We mathematically proved that our scheme is indistinguishable and prevents the attacker to threat legitimate individualsu0027 information and privacy. Finally, we showed our computation and memory efficiency compared with related studies.

Leakageresilient biometricbased remote user authentication with fuzzy extractors Abstract   Fuzzy extractors convert biometrics and other noisy data into a cryptographic key for security applications such as remote user authentication. Leakage attacks, such as side channel attacks, have been extensively modelled and studied in the literature. However, to the best of our knowledge, leakage attacks to biometricbased remote user authentication with fuzzy extractors have never been studied rigorously. In this paper, we propose a generic framework of leakageresilient and privacypreserving biometricbased remote user authentication that allows an authorized user to securely authenticate herself to a remote authentication server using her biometrics. In particular, the authorized user relies only on her secret biometrics to perform a valid authentication xe2x80x94 which is suitable for user authentications in a crossplatform setting.