A novel biometric-based password authentication scheme for client-server environment using ECC and fuzzy extractor. (2018)

• Record Type: Journal Article
• Authors: Islam, SK Hafizul; Das, Ashok Kumar; Khan, Muhammad Khurram
• Is Part Of: International journal of ad hoc and ubiquitous computing. Volume 27:Number 2(2018)
• Page Start: 138
• Page End: 155
• Publication Date: 2018
• Subjects: biometric -- fuzzy extractor -- password -- hash function -- smartcard -- ECC -- elliptic curve cryptography -- remote user authentication -- security; Ubiquitous computing -- Periodicals; Embedded computer systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; Wireless communication systems -- Periodicals; Computer architecture -- Periodicals; 004.2
• Languages: English
• ISSNs: 1743-8225

Abstract

In this paper, we devise a new and efficient biometric-based password authentication scheme (BIO-PWA) for the client-server environment. Our scheme uses the elliptic curve cryptography (ECC) along with the fuzzy extractor. Through the rigorous security analysis, we show that our scheme is secure against various known attacks. We further show that our scheme is secure in the generic group model through the formal security analysis. In addition, the formal security verification of our scheme using the widely-accepted automated validation of internet security protocols and applications (AVISPA) tool is performed against active and passive adversaries and the simulation results clearly demonstrate that our scheme is secure against active and passive attacks, including the replay and man-in-the-middle attacks. Finally, we show that our scheme is also efficient in computation against the existing related ECC-based authentication schemes for the client-server environment.