Continuous Biometric Verification for Non-Repudiation of Remote Services

Abstract

As our society massively relies on ICT, security services are becoming essential to protect users and entities involved. Amongst such services, non-repudiation provides evidences of actions, protects against their denial, and helps solving disputes between parties. For example, it prevents denial of past behaviors as having sent or received messages. Noteworthy, if the information flow is continuous, evidences should be produced for the entirety of the flow and not only at specific points. Further, non-repudiation should be guaranteed by mechanisms that do not reduce the usability of the system or application. To meet these challenges, in this paper, we propose two solutions for non-repudiation of remote services based on multi-biometric continuous authentication. We present an application scenario that discusses how users and service providers are protected with such solutions. We also discuss the technological readiness of biometrics for non-repudiation services: the outcome is that, under specific assumptions, it is actually ready.

Design, implementation, and assessment of a usable multi-biometric continuous authentication system

“…The different biometric data are acquired continuously by the workstation, and the identity of the user is verified. The foundations of the devised system, that has been initially presented in [50] in a preliminary version, has been re-applied or considered as inspiration in recent works, especially [51] and [52].…”

“…This is just an example, but areas where continuous authentication is desirable are multiple. An important category is safety critical command and control rooms, where operators are responsible for public safety, transportation, air traffic management, or in all the areas where the computer system has to be accessible only to certified and authorized users, otherwise intrusions may be the cause of severe or even catastrophic consequences [51], [52]. Let us think about a crisis management system where human operators working in a control room are in charge of analyzing and interpreting situations that describe the current status of an emergence [53].…”

A Requirements-Driven Methodology for the Proper Selection and Configuration of Blockchains

“…• Non-repudiation. Non-repudiation [8] is another fundamental property which can be satisfied using blockchains, thus if it is considered a requirement, the diagram directly produces the output of the first phase of the methodology: "Blockchain RECOMMENDED". • Multiple writers.…”