Internet Security Using Biometrics

Existing Security Primitives and Their Limitations

The existing security primitives use a generic cryptographic system, the user authentication method is possession based. It means the possession of the decrypting key is sufficient to establish the authenticity of the user. Since cryptographic keys are long and random they are difficult to member. So, these keys are stored and released based on some alternative authentication mechanism i.e. password. As shown in Figure 1 if internet users use simple password then it is easy to guess, and they compromise security and complex password which are difficult to remember, and are costly to maintain. Most internet users use the same password across different application, as hacker or impostor after getting a single password can now access multiple applications. So in a multiuser account case, passwords are unable to provide no repudiation.

Password Survey (Nov. 2006)

• 1.

  26%- use common words, dates, phone, address numbers

• 2.

  38%- recycle old passwords

• 3.

  62%- change password only if perceiving a security threat

• 4.

  17%- keep password list on monitor, keyboard or desk drawer.

Figure 1.

Different methods to remember passwords