One-Time Biometrics for Online Banking and Electronic Payment Authentication - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

One-Time Biometrics for Online Banking and Electronic Payment Authentication

Résumé

Online banking and electronic payment systems on the Internet are becoming increasingly advanced. On the machine level, transactions take place between client and server hosts through a secure channel protected with SSL/TLS. User authentication is typically based on two or more factors. Nevertheless, the development of various malwares and social engineering attacks transform the user's PC in an untrusted device and thereby making user authentication vulnerable. This paper investigates how user authentication with biometrics can be made more robust in the online banking context by using a specific device called OffPAD. This context requires that authentication is realized by the bank and not only by the user (or by the personal device) contrary to standard banking systems. More precisely, a new protocol for the generation of one-time passwords from biometric data is presented, ensuring the security and privacy of the entire transaction. Experimental results show an excellent performance considering with regard to false positives. The security analysis of our protocol also illustrates the benefits in terms of strengthened security.
Fichier principal
Vignette du fichier
Ares14_AP_PL_CR_AJ.pdf (607.32 Ko) Télécharger le fichier
Origine Fichiers éditeurs autorisés sur une archive ouverte
Loading...

Dates et versions

hal-01076676 , version 1 (23-10-2014)

Licence

Identifiants

Citer

Aude Plateaux, Patrick Lacharme, Christophe Rosenberger, Audun Jøsang. One-Time Biometrics for Online Banking and Electronic Payment Authentication. International Cross-Domain Conference and Workshop on Availability, Reliability, and Security (CD-ARES), Sep 2014, Fribourg, Switzerland. pp.179-193, ⟨10.1007/978-3-319-10975-6_14⟩. ⟨hal-01076676⟩
419 Consultations
1282 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More