Biometric authentication as a service for enterprise identity management deployment: a data protection perspective
Authors:
- Christian SenkCSChristian Senk
- Florian DotzlerFDFlorian Dotzler
- 1 August 2011
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 43-50
Abstract
Biometric Authentication as a Service is an innovative approach for strong authentication in web environments based on the Software as a Service model. However, both the adoption of SaaS systems and biometric technologies negatively correlate with perceived privacy and data protection risks. We specify a list of evaluation criteria for BioAaaS systems from a data protection point of view including elements specific to both biometrics and SaaS. We further apply these criteria on a prototypical implementation of a SaaS-compliant biometric authentication service based on keystroke dynamics for enterprise deployment. The assessment shows that for the most part the prototype conforms to technical data protection requirements. At the organizational level the selection and control of a trust-worthy provider and the conclusion of the service agreement remain.Keywords
This publication has 11 references indexed in Scilit:
- On the Design of an Authentication System Based on Keystroke Dynamics Using a Predefined Input Text2011
- Cloud Computing und DatenschutzDatenschutz und Datensicherheit - DuD, 2010
- Security for Web Services and Service-Oriented Architectures2010
- A Systematic Process for Developing High Quality SaaS Cloud Services2009
- Anonymous Biometric Access ControlEURASIP Journal on Information Security, 2009
- Using quantified trust levels to describe authentication requirements in federated identity management2008
- Keystroke analysis of free textACM Transactions on Information and System Security, 2005
- GA SVM Wrapper Ensemble for Keystroke Dynamics AuthenticationLecture Notes in Computer Science, 2005
- Keystroke Biometric System Using WaveletsLecture Notes in Computer Science, 2005
- Sicherheit in der Informationstechnik?der Begriff IT-SicherheitInformatik Spektrum, 2004