Efficient biometric and password based mutual authentication for consumer USB mass storage devices

Abstract

A Universal Serial Bus (USB) Mass Storage Device (MSD), often termed a USB flash drive, is ubiquitously used to store important information in unencrypted binary format. This low cost consumer device is incredibly popular due to its size, large storage capacity and relatively high transfer speed. However, if the device is lost or stolen an unauthorized person can easily retrieve all the information. Therefore, it is advantageous in many applications to provide security protection so that only authorized users can access the stored information. In order to provide security protection for a USB MSD, this paper proposes a session key agreement protocol after secure user authentication. The main aim of this protocol is to establish session key negotiation through which all the information retrieved, stored and transferred to the USB MSD is encrypted. This paper not only contributes an efficient protocol, but also does not suffer from the forgery attack and the password guessing attack as compared to other protocols in the literature. This paper analyses the security of the proposed protocol through a formal analysis which proves that the information is stored confidentially and is protected offering strong resilience to relevant security attacks. The computational cost and communication cost of the proposed scheme is analyzed and compared to related work to show that the proposed scheme has an improved tradeoff for computational cost, communication cost and security.

A Three Factor Remote User Authentication Scheme Using Collision Resist Fuzzy Extractor in Single Server Environment

“…But, the researchers have considered biometric feature [2] with the password to enhance the security label. Therefore, many researchers have proposed biometric and password based authentication schemes in [17][18][19][20][21][22][23][24][25][26][27][28]. Li and Hwang [17] proposed a biometrics-based remote user authentication scheme in 2010.…”

“…A collision resistant fuzzy extractor [2,27] can be model as a procedure, known as Gen, which takes a binary string say, B of some metric space M as an input, where M ∈ {0, 1} k , for some k bits and produces a random string say, ϕ ∈ R {0, 1} n , for some n bits and an auxiliary string say, θ ∈ R {0, 1} r , for some r bits, where r = k or n bits. It can be mathematically represented by Gen : M → ϕ × θ.…”

An effective key distribution for secure internet pay‐TV using access key hierarchies

“…The user at higher level uses a one‐way Hash function to derive the lower level group‐key values. The one‐way hash function used in the proposed protocol is H :{0,1}xx‐xx ∗ →{0,1}xx‐xx p where p is a large prime number . The following equation is used to find the link values L i .…”

A robust ElGamal‐based password‐authentication protocol using smart card for client‐server communication

“…Client‐server communication is a most generic term in network communication system where users' end is treated as client and they get many facilities and services by accessing the services through Internet. There are lot of applications in real world such that e‐medical system, online payment system, access of USB storage device, grid computing, and so on. But as communications are done through insecure channel like Internet, outsider may hamper the communications.…”