Design of Secure Biometric-Based Access Mechanism for Cloud Services

Abstract

In our data-driven society, the demand for remote information storage and computation services is increasing exponentially, as is the need for secure access to such information and services. during this project, we have a tendency to style a replacement biometric-based authentication protocol to produce secure access to an overseas (cloud) server. Within the planned approach, we have a tendency to think about biometric information of a user as a secret credentials. We have a tendency to then derive a novel identity from the user’s biometric information that is more accustomed generate the user’s non-public key. Additionally, we have a tendency to propose Associate in nursing economical approach to come up with a session key between 2 act parties victimization 2 biometric templates for a secure message transmission. In different words, there's no ought to store the user’s non-public key anyplace and therefore the session secret is generated while not sharing any previous info.  A close Real-Or Random (ROR) model-based formal security analysis, informal (non-mathematical) security analysis, and formal security verification victimization the widely accepted machine-controlled Validation of internet Security Protocols and Applications (AVISPA) tool show that the planned approach will withstand many well-known attacks against (passive/active) adversary.