Novel and Efficient Privacy-Preserving Continuous Authentication
Open Access
- 24 January 2024
- journal article
- research article
- Published by MDPI AG in Cryptography
- Vol. 8 (1) , 3
Abstract
Continuous authentication enhances security by re-verifying a user’s validity during the active session. It utilizes data about users’ behavioral actions and contextual information to authenticate them continuously. Such data contain information about user-sensitive attributes such as gender, age, contextual information, and may also provide information about the user’s emotional states. The collection and processing of sensitive data cause privacy concerns. In this paper, we propose two efficient protocols that enable privacy-preserving continuous authentication. The contribution is to prevent the disclosure of user-sensitive attributes using partial homomorphic cryptographic primitives and reveal only the aggregated result without the explicit use of decryption. The protocols complete an authentication decision in a single unidirectional transmission and have very low communication and computation costs with no degradation in biometric performance.Keywords
Funding Information
- Privacy Matters (PriMa) project (860315)
- European Union’s Horizon 2020 research and innovation programme under the Marie Skłodowska-Curie (860315)
This publication has 23 references indexed in Scilit:
- Reconciling user privacy and implicit authentication for mobile devicesComputers & Security, 2015
- Flexible and Robust Privacy-Preserving Implicit Authentication2015
- Information revealed from scrolling interactions on mobile devicesPattern Recognition Letters, 2015
- Privacy-Preserving Implicit Authentication2014
- Secure privacy-preserving protocols for outsourcing continuous authentication of smartphone users with touch data2013
- Continuous keystroke dynamics: A different perspective towards biometric evaluationInformation Security Technical Report, 2012
- Privacy-Preserving Face Recognition2009
- A correction to 'efficient and secure comparison for on-line auctions'International Journal of Applied Cryptography, 2009
- Identifying almost identical files using context triggered piecewise hashingDigital Investigation, 2006
- A fuzzy commitment scheme1999