A Novel Digital Signature Algorithm based on Biometric Hash

People have traditionally used signatures as a means of informing others that the signature has read and understood a document. Digital signature in a document is bound to that document in such a way that altering the signed document or moving the signature to a different document invalidates the signature. This security eliminates the need for paper copies of documents and can speed the processes involving documents that require signatures. Digital Signatures are messages that identify and authenticate a particular person as the source of the electronic message, and indicate such persons approval of the information contained in the electronic message. Emerging applications like electronic commerce and secure communications over open networks have made clear the fundamental role of public key cryptosystem as unique security solutions. On the other hand, these solutions clearly expose the fact, that the protection of private keys is a security bottleneck in these sensitive applications. This problem is further worsened in the cases where a single and unchanged private key must be kept secret for very long time (such is the case of certification authority keys, and e-cash keys). They help users to achieve basic security building blocks such as identification, authentication, and integrity.

2013 4th International Conference on Computer and Communication Technology (ICCCT), 2013

ABSTRACT Signatures are widely used as a means of personal identification and verification. Many documents like bank cheques and legal transactions require signature verification. Signature-based verification of a large number of documents is a very difficult and time consuming task. Consequently an explosive growth has been observed in biometric personal verification and authentication systems that are connected with quantifiable physical unique characteristics (finger prints, hand geometry, face, ear, iris scan, or DNA) or behavioral features (gait, voice etc.). As traditional identity verification methods such as tokens, passwords, pins etc suffer from some fatal flaws and are incapable to satisfy the security necessities, the paper aims to consider a more reliable biometric feature, signature verification for the considering. We present a survey of signature verification systems. We classify and give an account of the various approaches that have been proposed for signature verification.

In the present scenario, the advancements and development of Information Technology makes the people to depend on various computing devices to do their work efficiently and conveniently. To protect the data from the hackers during transmission, it " s best preventing from the unauthorized person access. To achieve this key (Cryptography) and fingerprint, tongue iris…etc (Biometrics) can be used to resolve this problem. This paper is about comparative study on three papers with different algorithms and methods to provide data protection from an intruder. This paper helps you to understand how to provide an enhanced security for data transmission and authentication of a person by integrating features of Cryptography and Biometrics.

cse.lehigh.edu

Despite the fact that public key algorithms are very strong, their security lies in the safe custody of the private key. In case of private key compromise, extensive damage may be caused to the user as the key can be used to sign forged documents. The usual way to store a private ...

International Journal for Research in Applied Science & Engineering Technology (IJRASET), 2022

This alludes to measurements identified or verified with human qualities. Biometrics techniques are validating is useful and utilized in the software testing or engineering as the any type of IDs and also access control. This is likewise used distinguish persons in collect or gatherings that are under re-co naissance. Biometric technique identifiers or validates are the particular, correct qualities used to identify name and depute individuals. The biometric validates or identifiers are frequently sorted as physiological vs behavioral (use as social) characteristics. The physiological or behavioral attributes are the identified or verified with the any part of the full body and we can see as well. Precedents incorporate, these are not any restricted to fingerprint impression, face, veins, DNA, hand geometry ,palm print bio, iris , eye retina and smell/odor/fragrance. The behavioral (like as Social) characteristics and attributes are verified or identified within this instance of conduct to a human like a man or women, including yet not also restricted to composing, walk, and human voice.

Biometrics can provide a key element of identity management, both in terms of biometric user authentication and identity assurance systems. In the area of cyber-security, it is important to know both who is attempting to access a system and that biometric identity data is itself protected. Biometrics has emerged as an important tool in supporting effective identity management by strongly binding a physical person to their identity. ISO has developed several standards that support the use of biometrics in a cyber-security environment. Signcryption is a relatively new cryptographic primitive, standardized in 2012 as ISO/IEC 29150 .Signcryption uses "an asymmetric encryption scheme and a digital signature scheme combined in a specific way", along with "a specially developed algorithm" to perform both encryption and digital signature functions simultaneously. This efficient cryptographic technique provides data integrity, origin authentication, and data confidentiality in a single operation.

2012

The Design and Implementation of a Biometric System for Nigerian Prisons Service (NPS) using Calabar Prisons as case study has been carried out. The system allows users (prison inmates) to be enrolled so that their biometric fingerprint trait is captured and encrypted using Hash Massage Authentication Code (HMAC) technique modeled via cryptographic hash algorithms. The unique corresponding HMAC of the user generated can then be stored in either the application database or in a smart memory card (smart card) for future usage and referencing.

With the use of mobile devices as a client for Internet, the threat of unauthorized and unauthenticated access of crucial documents is increasing day by day. Although Digital Signature is meant to be the solution for the unauthenticated access, its implementation is not adequate till now. Symmetric Data Transfer mechanism is used for the transfer of significant documents, but there is need of a more competent mechanism for safe transfer, authentication as well as verification of the documents. In this paper, we contemplate Asymmetric Data Transfer mechanism for the transfer of documents on Smartphones. But Asymmetric Cryptographic algorithms require complex computations and consume lot of power for execution. Hence a new technique is suggested in the paper, which is merely based on the concept of Asymmetric Cryptography but is feasible for smartphones. The paper also presents some research about the pre-existing techniques for implementation of Digital Signature technology.

2015

Nowadays, security plays a major role in communication. Security is the degree of resistance to, or protection from harm or viruses that corrupts the system. As there is tremendous increase in the use of internet and various communication channels , the issue of data or message security is arised. Digital signature is a technique that provides security to the data or message. In this paper we are going to survey on the digital signature. It is an electronic signature used to authenticate the identity of the sender and it assures that original content of the message or document received by the receiver is unchanged or same. The goal of the paper is to study the various digital signature methods proposed recently to secure the data transmission.

International Journal of Computer Applications, 2015

The digital signature technique is essential for secure transactions over open networks. It is used in a variety of applications to ensure the integrity of data exchanged or stored and to prove to the recipient the originator's identity. Digital signature schemes are mostly used in cryptographic protocols to provide services like entity authentication, authenticated key transport and authenticated key agreement. This architecture is related with secure Hash Function and cryptographic algorithm In this paper we are going to make review about all those technique that are developed within last 5-10 years. And which are developed with the help of digital signature and based on public key cryptography. These techniques provides a better platform for security of data using cryptography.

International Journal of Computer Applications, 2021

Network is a node collection. The network's basic aim is to transfer information from one location to another. This information must be secured from access by third parties. The cryptography concept was based upon the necessity to secure critical data exchanged across an unsecured network. While using encryption the transmitter encrypts or encodes the information with a secret key so that only the tender recipient will understand it. Cryptanalysis, however, means unwanted access without the secret information key. The cryptography uses various techniques that are Diffie Hellman, AES, RSA, DES, IDEA, BLOWFISH, x.509, PKI, Digital Signatures convert plain texts into the respective chipper text. In different circumstances all these algorithms are important. RSA's most productive computerized signature calculation .This article presents a precise writing review of different computerized signature frameworks dependent on RSA. A basic report is completed on the key age, the creation of marks, the mark check of different computerized signature approaches.

Signature identification using Biometrics methods is a well-studied problem in Biometrics. It involves the authentication of a person based on his signature. This paper is developed by using Vb.net as a front end Ms Access as backend. Our method validates the signature based on hand movement when a person signs his signature. Our method has a unique advantage over existing systems. A signature can be drawn easily by other unintended persons in important documents. But it is sure that only the original person can sign with the same fast movement and correct sequence. Since our method tracks the movement sequence and the speed with which the person signs his signature, it is highly accurate for authentication than any other existing system. One of the main advantages of our method is computationally inexpensive, that is it uses minimum system resources, less memory and hence offers a very high speed of recognition. Also, the signature identification cannot be duplicated unlike the existing methods where the passwords could be cracked using trail-and-error methods. We implement the system using the GUI tools of VB.NET. He has to draw his signature using the mouse in the panel and he/she is entered into the website based on the recognition result.

Handwritten signature biometric is considered as a noninvasive and nonintrusive process by the majority of the users. Furthermore, it has a high legal value for document authentication, as well as being dependent on by both commercial transactions and governmental institutions. Signature verification requires storing templates in the database, which threatens the security of the system from being stolen, to being vulnerable to the template playback attack that may give an attacker an invalid access to the system. Moreover, an individual cannot use his / her signature with two applications or more, otherwise, a cross matching problem will occur. The aforementioned problems can be avoided by using biometric template protection techniques for the online signature, which have been reviewed and discussed in this paper considering both protections and verification. Furthermore, the verification elaboration comprises of capture devices, pre-processing, feature extraction and classification methods.

2001

Although PKI offers many advantages like authentication, integrity, non-repudiation and confidentiality, it cannot identify the maker of a transaction. It can only identify maker's belongings (disks, smart cards) or what he remembers (passwords, PINs etc). Integrating biometrics with PKI to directly generate private key can not only identify the maker accurately but can also resolve the key management issue by not having to store the private key anywhere. We proposed a new system to generate digital signatures using biometrics and denominated it as Biometric Signatures in . We also discussed two schemes to generate Biometric Signatures using RSA and DSA. This paper gives detail description of the modifications suggested for private key generation in [1,2] using both schemes to allow certificate renewal. This paper also proposes a new method to generate private keys for Biometric Signatures using RSA. Speed of Biometric Signatures using modified schemes for iris recognition and comparative key generation speeds for various biometrics is presented using JAVA implementation of both approaches.