Passwordless Cloud Authentication using Biometric - Derived Keys and Signature of Elliptic Curve

Abstract: Cloud authentication traditionallyrelies on password-based mechanisms, whichare vulnerable to phishing, credential theft,and password reuse attacks. To address theselimitations, this paper proposes a biometric-driven Passwordless authentication schemefor cloud environments using Elliptic CurveCryptography (ECC). Biometric features aresecurely processed and hashed to derive astable cryptographic scalar, which is mappedto an ECC private key. The correspondingpublic key is stored on the cloud server, whilethe private key is regenerated dynamicallyduring authentication without being stored.User authentication is achieved throughECDSA signature verification, ensuringbiometric privacy and strong security. Theproposed scheme eliminates password-related risks and provides resistance againstphishing, replay, and impersonation attackswhile maintaining computational efficiency.