BioPKI: Identity Authentication with Biometric Public Key Infrastructure in Healthcare Systems

The constraints of Public Key Infrastructure (PKI), which has been used in critical infrastructure systems since the World Wide Web, remain unresolved. As government-driven digital identification becomes increasingly prevalent around the world particularly in India, it’s critical to understand the shortcomings and threats with PKI particularly in healthcare systems. This paper proposed an approach to enhance the digital identity security process by associating the biometric data with PKI and get around the PKI’s challenges and hazards to be applied in general and in healthcare systems in particular. The proposed approach called BioPKI enhances the security and authentication aspects of digital identity in healthcare setting. This work identified the implementation PKI challenges and proposed the new model termed as BioPKI which associates the biometric information of the user with the public-private key pair generated through RSA algorithm. The Bio-PKI model is tested against various attacks such as key-pair theft, unauthorized access to the pki model, session hijacking, man in the middle attack, and node compromising.