Leveraging Biometric Authentication and Blockchain Technology for Enhanced Security in Identity and Access Management Systems
Keywords:
Identity and Access Management (IAM), Biometric AuthenticationAbstract
Strong IAM solutions are needed for the expanding number of digital connections. Phishing, credential stuffing, and brute-force attacks are common with password-based access control, which has been used for decades. This rising vulnerability requires more secure authentication techniques. Biometric authentication, which employs unique and measurable biological features, is far safer than passwords. A data leak in centralized biometric template repositories might destabilize the system and render biometric data useless for authentication.
This paper explores how biometric identity and blockchain can provide a secure, decentralized IAM system. Blockchain, encryption, distributed ledger systems, and a robust consensus mechanism transform data management. Blockchain technology may fix IAM system data centralization issues. Blockchain integration may boost IAM security. Blockchain's distributed ledger stores data securely and immutably. All network participants would instantly detect data ledger modifications, reducing data tampering. Blockchain provides users greater biometric data control. The blockchain stores biometric template encrypted hashes instead of raw data to safeguard user privacy. Permissioned access control allows users grant app or entity access. Decentralized strategies reduce data breach risks by eliminating a single point of failure.
References
A. Meneghetti, M. Raugei, and S. T. Habib, "A Framework for User Authentication with Fingerprint Biometrics and Blockchain Technology," in 2018 IEEE International Conference on Systems, Man, and Cybernetics (SMC), pp. 1780-1785, Oct. 2018. [IEEE Xplore]
Y. Lee and J. Jeong, "Blockchain-based Secure User Authentication System using Facial Recognition," Journal of Information Processing Systems, vol. 15, no. 2, pp. 557-569, 2019. [DOI]
S. Gao, J. Ning, W. Liu, and W. Huang, "Secure Access Control with Iris Recognition Based on Consortium Blockchain for Internet of Things," IEEE Access, vol. 7, pp. 147019-147032, 2019. [IEEE Xplore]
M. Nikkhah, M. A. Jalil, and S. H. Noordin, "Blockchain-Enabled Secure Voice Recognition System for E-government Services," IEEE Access, vol. 8, pp. 11835-11847, 2020. [IEEE Xplore]
A. Shafa, M. N. Aman, M. F. A. Hossain, M. A. Mahmud, and K. H. Islam, "Towards a Secure and Decentralized Identity Management Framework Using Blockchain Technology," IEEE Access, vol. 7, pp. 140222-140235, 2019. [IEEE Xplore]
X. Chen, J. Li, J. Weng, and J. Xiang, "A Cross-Domain Identity Authentication Scheme Using Consortium Blockchain for Secure Healthcare Data Access," IEEE Journal of Biomedical and Health Informatics, vol. 24, no. 8, pp. 2230-2240, 2020. [IEEE Xplore]
M. Razzaque, M. S. Khan, and H. Khurshid, "Blockchain-Based Secure and Efficient Decentralized Identity Management System," IEEE Access, vol. 8, pp. 18213-18228, 2020. [IEEE Xplore]
M. Grieger, "Blockchain and Biometrics: A Perfect Match? A Critical Analysis," arXiv preprint arXiv:2302.10883, 2021. [arXiv]
J. Zhang, N. Wang, D. He, Z. Wang, X. Dong, and Y. Ren, "A Secure and Efficient Identity-Based Cryptography for Blockchain in Decentralized Identity Management," IEEE Access, vol. 6, pp. 11220-11232, 2018. [IEEE Xplore]
A. Khalid, S. Khan, M. A. Khan, and S. Lee, "A Lightweight Blockchain-Based Digital Identity Management System for E-Healthcare Applications," IEEE Access, vol. 8, pp. 171222-171235, 2020. [IEEE Xplore]
N. Hassan, S. Zhao, S. A. Madani, and M. Hammoudi, "Decentralized Identity Management Using Self-Sovereign Identity and Blockchain Technology," IEEE Transactions on Engineering Management, pp. 1-11, 2021. [IEEE Xplore]
J. Jang, J. Kim, J. Park, and S. Moon, "Blockchain-Based Decentralized Identity Management for Secure Medical Information Sharing," IEEE Access, vol. 7, pp. 142226-142237, 2019. [IEEE Xplore]
A. Banerjee, S. R. Choudhury, S. Roy, and S. Misra, "Secure and Decentralized Identity and Access Management (SIAM) Using Blockchain for IoT-Based Supply Chains," IEEE Internet of Things Journal, vol. 8, no. 11, pp. 9221-9232, 2021. [IEEE Xplore]
A. Khalid, S. Khan, M. A. Khan, and S. Lee, "Towards Secure and Efficient Decentralized Identity Management in Fog Computing using Blockchain," IEEE Transactions on Sustainable Computing, vol. 13, no. 4, pp. 2327
