Information technologies and computer sciences

The Concept of Introduction of the Automated Speaker Recognition System in the Authentication Process for Access to the Critical System

Authors

V. V. Kovtun
Vinnytsia National Technical University ROR
DOI https://doi.org/10.31649/1997-9266-2018-140-5-41-52

Keywords

automated speaker recognition system for critical use authentication cryptosystem

Abstract

In the article, ISO/IEC 27001: 2013, an effective and user-friendly concept of reliable authentication for accessing a multi-server information critical system, which includes, in particular, a set of users, a set of servers and a dedicated server —a registration center for a system objects registration without the maintenance of verification tables, is proposed. Information exchange between the objects of the system is organized using secure sessions based on an secret keys with a matching mechanism based on one-way hash functions and cryptography of elliptic curves, which now provides the best correlation between encryption reliability and a size of a secret key among existing cryptosystems. Work with users is personalized using individual access cards, which are protected based on the provisions of the cryptographic theory of elliptical curves. Access cards, in addition to identification information and password, store biometric information about the features of the user's voice in the form of a information features vector. The application for authentication, which is installed on the user's computing device, is initiated by a two-step user recognition procedure (with an identification card) — according to the individual features of his voice and the entered password, which together with convenience ensures the reliability of the authentication process. The basic concept of introduction of the automated speaker recognition system in the authentication process for access to the critical system was proposed in the article, and according to the results of the tests it was concluded that it conforms to the requirements of the ISO/IEC 27001: 2013 standard. However, experience in the practical use of the authentication system for accessing information critical system found a number of vulnerabilities in the basic concept, for the purpose of eliminating them, an improved concept was created that also fully meets the requirements of ISO/IEC 27001: 2013. The article evaluates the computational efficiency of the proposed concepts on the basis of calculating the number of the most computationally complex operations — scalable multiplication Tm and calculating the hash function Th for authentication of objects as part of the information critical system (user, server, registration center and all these objects together). The final computational complexity of the basic concept was 4Tm + 15Th, and of the advanced one — 6Tm + 17Th, which in absolute terms is an average result in comparison with analogues. However, the use of cryptography of elliptical curves makes hashing operations about 6 times faster than hashing with the use of a public key, as in analogues.

853 295

How to Cite

[1]
“The Concept of Introduction of the Automated Speaker Recognition System in the Authentication Process for Access to the Critical System”, Вісник ВПІ, no. 5, pp. 41–52, Nov. 2018, doi: 10.31649/1997-9266-2018-140-5-41-52.

Author Biography

V. V. Kovtun, Vinnytsia National Technical University

Cand. Sc. (Eng.), Assistant Professor, Assistant Professor of the Chair of Computer Control Systems

References

Will Larson, “Overview of Single vs. Multi Server Architecture.” [Electronic resource], Access mode: https://lethain.com/overview-of-single-vs-multi-server-architecture/.
L. Catuogno, and C. Galdi, “On user authentication by means of video events recognition,” Journal of Ambient Intelligence and Humanized Computing, vol. 5, no. 6, pp. 909-918, 2014.
D. He, Y. Zhang, and J. Chen, “Cryptanalysis and improvement of an anonymous authentication protocol for wireless ac-cess networks,” Wireless Personal Communications, vol. 74, no. 2, pp. 229-243, 2014.
P. Guo, J. Wang, B. Li, and S. Lee, “A variable threshold-value authentication architecture for wireless mesh networks,” Journal of Internet Technology, no.15, pp. 929-936, 2014. https://doi.org/10.6138/JIT.2014.15.6.05.
L. Lamport “Password authentication with insecure communication.” [Electronic resource], Access mode: https://lamport.azurewebsites.net/pubs/password.pdf .
C. C. Chang, and J. S. Lee, “An efficient and secure multi-server password authentication scheme using smart cards,” Proc of third international conference on cyberworlds (CW’04). IEEE Computer Society, Los Alamitos, pp. 417-422, 2004. https://doi.org/10.1109/CW.2004.17.
E. J. Yoon, and K. Y. Yoo, “Robust biometrics-based multi-server authentication with key agreement scheme for smart cards on elliptic curve cryptosystem,” The Journal of Supercomputing, vol. 63, no. 1, pp. 235-255, 2013.
L. H. Li, I. C. Lin, and M. S. Hwang, “A remote password authentication scheme for multi-server architecture using neural networks,” IEEE Transactions on Neural Networks, vol. 12, iss. 6, pp. 1498-1504, 2001.
Y. P. Liao, and S. S. Wang, “A secure dynamic id based remote user authentication scheme for multi-server environment,” Computer Standards & Interfaces, vol. 31, pp. 24–29, 2009.
А. А. Болотов, С. Б. Гашков, А. Б. Фролов, и А. А. Часовских, Элементарное введение в эллиптическую крипто-графию. Москва: КомКнига, 2006, 260 с.
ISO/IEC 27001:2013, “Information technology – Security techniques – Information security management systems – Re-quirements.” [Electronic resource], Access mode: https://trofisecurity.com/assets/img/iso27001-2013.pdf .
М. М. Биков, та В. В. Ковтун, «Оцінювання надійності автоматизованих систем розпізнавання мовців критичного застосув ання,» Вісник Вінницького політехнічного інституту, № 2, c. 70-76, 2017.
О. Н. Жданов, и В. В. Золотарев, Методы и средства криптографической защиты информации. Красноярск: СибГАУ, 2007, 217 с.
О. Н. Жданов, и Т. А. Чалкин, Применение эллиптических кривых в криптографии. Красноярск: СибГАУ, 2011, 65 с.

Most read articles by the same author(s)

1 2 > >>