International Journal of Computer Science Trends and Technology (IJCST) Volume 4 Issue 5, Sep - Oct 2016

Transcription

1 Internatonal Journal of Computer Scence Trends and Technology (IJCST) Volume 4 Issue 5, Sep - Oct 2016 RESEARCH ARTICLE OPEN ACCESS Bometrc Based User Authentcaton n WSN Usng ABC Optmzaton D.Thamaraselv [1], Dr.M.Ramakrshnan [2] Department of Computer Scence and Engneerng, SCSVMV Unversty, Kanchpuram Department of Informaton Technology, Madura kamarajar Unversty, Madura ABSTRACT Authentcatng a user s very mportant n un attended envronment lke wreless sensor network. Wreless sensor networks are used to montor physcal or envronmental condtons. authentcatng a user n wreless sensor networks s more dffcult than n tradtonal networks owng to sensor network characterstcs such as unrelable communcaton networks, resource lmtaton, and unattended operaton. As a result, varous authentcaton schemes have been proposed to provde secure and effcent communcaton.in ths proposed paper bometrc based remote user authentcaton usng ABC ALGORITHIM s used for optmzaton. Keywords:- user authentcaton, Bometrc,ABC, OPTIMIZATION I. INTRODUCTION A wreless sensor networks consst of a set of nodes deployed n large numbers to collect and transmt envronmental data to a collecton pont named Base Staton (BS).These networks have a partcular nterest for mltary applcatons, envronmental, home automaton, medcal, and many of the applcatons related to the montorng of crtcal nfrastructures. A user can access to the collected data ether drectly or remotely. In the frst case, user wth moble devce communcates drectly wth the sensor nodes.for securty reasons, access to the sensor networks should be controlled. We take nto consderaton that authentcatng remote users n WSNs s an mportant securty ssue due to ther unattended and hostle deployments. Moreover, sensor nodes are usually equpped wth lmted computng power, storage, and communcaton modules. Thus, authentcatng remote users n such resource-constraned envronment s a challenge securty concern. Accessng ths data wll, n general, not be for free snce the deployment of a WSN nduces some costs. Ths means that the deployment agences of some of these servces wll make them avalable only to subscrbers. In ths case, a WSN must be able to dstngush legtmate users from llegtmate ones, resultng n the problem of access control. The customer of ths company must pass an authentcaton protocol for each new sesson and take data ardng to hs prvleges descrbed n the database system. In ths paper, we propose a user authentcaton scheme based on (BIOMETRIC) fnger prnt of the user. It provde authentcaton of the user n wsn. WSN deployed by a commercal company over a large geographcal area to capture the physcal phenomena of the envronment such as temperature, humdty, etc. Accessng ths data wll, n general, not be for free snce the deployment of a WSN nduces some costs. Ths means that the deployment agences of some of these servces wll make them avalable only to subscrbers. In ths case, a WSN must be able to dstngush legtmate users from llegtmate ones, resultng n the problem of access control. II.RELATED WORK Ths paper extracts the features of fngerprnt and the standard devaton s calculated and stored n base staton. Artfcal bee colony alg s used for optmzed matchng of the fnger prnt. A. Fngerprnt Enhancement Ths s an usually requred process n creatng a securty system wth the help of bometrcs. Ths process ncludes subsequent processng on the gathered fngerprnt mage. Fngerprnt conssts of sequence of rdges and furrows on the fnger surface. Ths provdes the ndvdualty of the users fngerprnt. No two fngerprnts can have the smlar exstence of rdges and furrows. Mnutae ponts are local rdge features that appear at ether a rdge bfurcaton or a rdge endng. The rdges hold the nformaton of features mandatory for mnutae extracton. Hence the clarty of the rdge occurrences n a fngerprnt mage must be very mportant. The gathered mage s then enhanced wth the help of mage enhancement methods n order to dmnsh the nose n the mage. The mage enhancement methods used to enhance fngerprnt mage are normalzaton, ISSN: Page 165

2 Internatonal Journal of Computer Scence Trends and Technology (IJCST) Volume 4 Issue 5, Sep - Oct 2016 orentaton estmaton, local frequency estmaton, Gabor flterng, and thnnng. FINGER PRINT NORMALIZATION The fnal mage mprovement pace normally performed before mnutae extracton s thnnng [14]. Thnnng s a morphologcal process that consecutvely takes away the foreground pxels tll they are one pxel apart. By applyng the thnnng technque to a fngerprnt mage mantans the connectvty of the rdge structures durng the formaton of a skeleton stage of the bnary mage. Ths skeleton mage s subsequently utlzed n the followng extracton of mnutae. PREPROCESSING FREQUENCY FEATURE EXTRACTION THINNING MAPPING FIG:1 extractng mnature ponts B.Normalzaton Normalzaton technque s nothng but the standardzaton D. of Mnutae the Feature Extracton ntensty values n an mage by alterng the range of gray-level The values next step s to obtan the mnutae from the thnned wth the ntenton that t occurs wthn a preferred range of mage. values. The most commonly used technque of mnutae Addtonally the rdge structure n the fngerprnt does not undergo extracton any s the Crossng Number (CN) model. Ths alteratons n ts structure because of ths processng. Ths process process s nvolves the utlzaton of the skeleton mage n performed n order to standardze the dynamc levels of dssmlarty whch n the rdge flow pattern s eght-connected. The gray-level values that assst the processng of subsequent mnutae mage are obtaned by examnng the local mprovement processes. neghborhood of every rdge pxel n the mage by means of a 3x3 wndow. The CN value s then calculated whch s defned as partally the addton of the dfferences among the pars of neghborng pxels n the eght-neghborhood. Fgure 6 ndcates the lst of mnutae n a fngerprnt mage. Fgure 6. Mnutae extracton on a fngerprnt mage. Fgure 2 represents an mage of the fngerprnt before and after normalzaton C.Thnng: 3.1 ABC OPTIMIZATION ALG: ISSN: Page 166

3 Internatonal Journal of Computer Scence Trends and Technology (IJCST) Volume 4 Issue 5, Sep - Oct 2016 The Artfcal Bee Colony Algorthm s a swarm based optmzaton algorthm proposed for the frst tme by Karaboga n There are three knds of honey bees n ABC algorthm to forage food source. They are employed bees, onlookers and scouts bees. The tasks of these bees are to collect nectar around the hve. A bee watng on the dance area for makng decson to choose a food source s called an onlooker and a bee gong to the food source prevously vsted by t s named as an employed bee. A bee carryng out random search s called a scout bee. In ABC, food searchng and nectar foragng around the hve are performed by employed, onlooker and scouts bees collectvely. In the ABC algorthm, the frst half of the colony conssts of employed artfcal bees and the second half consttutes the onlookers. For every food source, there s only one employed bee. In other words, the number of employed bees s equal the number of food sources around the hve. The employed bee whose food source s exhausted by the employed and onlooker bees becomes a scout. on the ftness values of the employed bee. The probablty p of the onlooker bee wll select the soluton of the th employed bee. P ) n 1 ) In the above equaton (11) the ftness value of the th employed bee s gven usng the formula, obj() 1 ) (1 obj(1)) 1 abs( obj( )) f ( obj( ) 0) f ( obj( ) 0) s the objectve functon specfc for the problem 3.2 USER AUTHENTICATION SCHEME: Table1: Notatons Regstrant X Regstrant User name IX Regstrant Password P Regstrant Bometrc BK Regstrant Masked Password MP Smart card User SX Logn User name SIX Logn Password SP Logn Bometrc SBK Logn Masked Password SMP Smart card reader SM Base staton Y Strng Concatenaton operator FIG5: ABC SD ALG N N 1 ( 1 m ) In order to generate the new food source poston every onlooker bee memorzes the soluton of n employed bee based 3.2 A.Regstraton phase Intally, a new regstrant user regster hs/her dentty at the remote server n the Regstraton phase. Regstrant X send hs/her user name IX, password P and personal bometrcs BK on the smart card reader.before sendng ths detals the user concatenate the user name and password. Smart card reader MP ( P IX SM receves the regstrant message X. Smart card MP, BK from the regstrant user reader send the detals of the user to the correspondng cluster ) ISSN: Page 167

4 Internatonal Journal of Computer Scence Trends and Technology (IJCST) Volume 4 Issue 5, Sep - Oct 2016 head CH and then CH forward to the base staton Y.Ifthe above request s accepted, the base staton receves the masked password encrypted s decrypted MP.Then the masked password wll get E as specfed n eqn. 1 and the encrypted message D usng eqn. 3. The encrypton and decrypton detals are stored n the base staton.at the same tme,base staton wll extract the mnutae from the bometrc calculate the standard devaton evaluated detals are stored n the Y SD BK and usng eqn. 6.The. After regsterng, the base staton send a smart card to the regstered user. 3.2 B.Logn phase After regstraton, access the real-tme data from the WSNs by the user SX n the logn phase.frst user SX nsert the smart card nto the smart card reader then nputs hs/her dentty SIX and password SP nto the reader termnal. The logn user also concatenate the user name and password before sendng to the base staton. SMP If the logn message staton Y ( SP SIX SMP ) s receved by the base,as mentoned n the regstraton phase, the base staton wll encrypt the masked passwordas n eqn. 2 and then decrypt the masked password as n eqn. 4. After decryptonbase staton Y verfy the user wth the regstered user. Check SMP s equal to the stored. If not, then report wrong password P to the user. Ths process performs up to some predefned number of tmes so that t can wthstand password guessng attack by usng stolen or lost smart card. If the user name and password of the user s same, then t wll ask the bometrc SBK of the entered user. MP SX If the user enters the bometrcs SBK, the Base statony extracts the mnutae of the bometrcs and calculate the SD usng eqn. 2.In order to verfy the bometrc of the user, the standard devaton of the user SD of the regstered user X SX and the correspondng s gven as nput to the matchng ABC optmzaton algorthm. 3.2.C.Verfcaton phase After recevng the authentcaton request message, execute a mutual authentcaton process between the user and the remote system n the Verfcaton phase.when Y receves logn message SIX, SP from the user SX, Y frst checks whether receved SMP s equal to the stored MP. If not, then report wrong password P to the user. If the user name and password of the user s same, then t wll ask the bometrc the bometrcs user SBK SBK of the entered user SX. If the user enters, base staton verfy the bometrc of the SBK matches wth the regstered bometrc BK usng the ABC optmzaton algorthm. If the maxmum ftness value obtaned from the algorthm s less than or equal to the threshold means the user s authorzed to access the real tme nformaton. Otherwse, the user s declared as the unauthorzed and he/she not have the permsson to access the real tme nformaton. IV. Securty analyss We consder varous attacks lke prvleged nsder attack, guessng attack, stolen verfer attack, man-n-the-mddle attack, DoS attack, many logged-n users wth same logn-d attack, and smart card breach attack. Ths attacks are explaned below: 4.1 Prvleged nsder attack In ths scheme, the user does not send hs/her password n plan text durng regstraton. Here the user name IX and the password P s frst masked to produce MP, whch s MP P IX ). It s computatonally nfeasble to fnd P from ( MP because the base staton encrypt only the MP but not the orgnal user name and password. So the prvleged nsder of the base staton cannot know the password P. Thus he/she cannot mpersonate the user n thoseservers where the user mght have regstered hmself/herself wth the same password. So ths proposed scheme s resstance to the prvleged nsder attack. 4.2Password Guessng attack Consder the stuaton where a user lost hs/her smart card, and t s found by an attacker or s stolen by an attacker. In that case, the attacker cannot mpersonate that user by usng the smart card because f the logn message receved by the base staton Y SMP s,t verfy the user wth the regstered user. Check SMP s equal to the stored. If not, then report wrong password P to the user. Ths process performs up to some predefned number of tmes so that t can wthstand password guessng attack by usng stolen or lost smart card.so ths scheme s resstance to guessng attack. MP V.CONCLUSIONS In ths paper user s authentcated usng bometrc fnger prnt data where the features are extracted and stored n base staton when a user wants to access the data he has to nsert smart card and the fnger.the standard devaton s calculated usng artfcal bee colony algorthm for searchng n an optmzed way. VI.ACKNOWLEDGMENT, ISSN: Page 168

5 Internatonal Journal of Computer Scence Trends and Technology (IJCST) Volume 4 Issue 5, Sep - Oct 2016 Author pays sncere thanks to the gude for preparng the paper. REFERENCES [1] Awasth A. K. and Lal S, A remote user authentcaton scheme usng smarts cards wth forward secrecy, IEEE Trans. Consumer Electronc, vol. 49, no. 4, pp , [2] Chan C. K. and Cheng L. M, Cryptanalyss of a remote user authentcaton scheme usng smart cards, IEEE Trans. Consumer Electronc, 46, pp , [3] Leung K. C., Cheng L. M., Fong A. S. and Chen C. K, Cryptanalyss of a remote user authentcaton scheme usng smart cards, IEEE Trans. Consumer Electronc, 49-3, pp , [4] Lee S. W., Km H. S. and Yoo K. Y, Comment on a remote user authentcaton scheme usng smart cards wth forward secrecy, IEEE Trans. Consumer Electronc, 50, 2: pp , [5] Law H.T., Ln J.F. and Wu W.C., An effcent and complete remote user authentcaton scheme usng smart cards, Mathematcal and Computer Modellng, 44, pp , [6] Shen Z. H, A new modfed remote user authentcaton scheme usng smart cards, Appled Mathematcs, Volume 23-3, , [7] M. T. Tha, F. Wang, D. Lu, S. Zhu, and D. Z. Du, Connected domnatng sets n wreless networks wth dfferent transmsson ranges, IEEE Transactons on Moble Computng, vol. 6, no. 7, pp , [8] F. Dressler, Authentcated relable and sem-relable communcaton n wreless sensor networks, Internatonal Journal of Network Securty, vol. 7, no. 1, pp , [9] R. Fan, L. d Png, J. Q. Fu, and X. Z. Pan, A secure and effcent user authentcaton protocol for two tered wreless sensor networks, n Second Pacfc Asa Conference on Crcuts, Communcatons and System (PACCS 10), vol. 1, pp , [10] D. He, Y Gao, S. Chan, C. Chen, and J. Bu, An enhanced two-factor user authentcaton scheme n wreless sensor networks, Ad Hoc & Sensor Wreless Networks, vol. 10, no. 4, pp , [11] S. M. Metev and V. P. Veko, Laser Asssted Mcrotechnology, 2nd ed., R. M. Osgood, Jr., Ed. Berln, Germany: Sprnger-Verlag, ISSN: Page 169