Enhancing Cloud Security with Efficient Biometric Authentication System

The need for remote data storage and computation services is growing rapidly in our data-driven world; hence, the necessity for secure access to corresponding data and services. In this paper, we propose a biometric-based authentication protocol to provide secure access to a remote (cloud) server. In the proposed method, we treat biometric information of a user as a secret credential. We also determine a unique identity from the user’s biometric information, which is utilized further to create the user’s private key. Apart from that, we also suggest a reliable method to create a session key between two parties of communication with the help of two biometric templates for secure transmission of communication. In short, no need to save the user’s private essential anywhere and the session key is created without sharing any past information. A comprehensive Real- Or – Random (ROR) model based formal security analysis, informal (non-mathematical) security analysis and formal security verification using the widely-accepted Automated verification of Internet Security Protocols and Applications(AVISPA) tool uncover that the suggested approach can fend off various provided attacks on (unresistant/ active) adversary. Finally, large-scale trials and a comparative study prove the efficacy and usefulness of the suggested approach.