Title: A novel verification framework to analyse security attacks in a fingerprint authentication system

Authors: D. Harikrishnan; N. Sunilkumar; Shelbi Joseph; Kishor Krishnan Nair

Addresses: Cochin University of Science and Technology, Cochin, 682022, India ' Cochin University of Science and Technology, Cochin, 682022, India ' Cochin University of Science and Technology, Cochin, 682022, India ' Council for Scientific and Industrial Research (CSIR), P.O. Box 395, Pretoria 0001, South Africa

Abstract: The security vulnerabilities and flaws in the existing biometric fingerprint authentication system (FAS) are effectively overcome using the one time finger code (OTFC). Based on this OTFC technique, a new verification model is proposed in this work which is capable of evaluating and analysing the susceptibility of system to common security attacks. For verification and validation compliance, an integrated security framework with novel security protocol along with generation of a unique encryption key named terminal key is conceptualised and implemented. The exposure of the system to various security attacks are experimentally computed by measuring avalanche effect, which fetches an average value of 63.52%. Also, the severity of attack is verified by calculating base score obtained as 3, which is less in comparison with conventional systems. Hence it concludes that proposed FAS with new verification framework yields better results on exposure to common security threats than the conventional one.

Keywords: one time finger code; OTFC; fingerprint authentication system; FAS; attacks; security; avalanche effect; base score; biometric; fingerprint; terminal key; algorithm; man in the middle; MITM; replay attack; relay attack; mutual authentication.

DOI: 10.1504/IJITST.2023.127390

International Journal of Internet Technology and Secured Transactions, 2023 Vol.13 No.1, pp.64 - 84

Accepted: 26 Jun 2022
Published online: 02 Dec 2022 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article