SCORE LEVEL FUSION BASED OTP GENERATION USING BIOMETRIC ECC
Palm lines are the unique biometric characteristics of an individual and hence can be reliably used for authentication purposes. These biometric characteristics are similar in both hands and hence multi instance biometric features that can be fused together with much reliability. They are fused together by score level fusion. Score level fusion is a method in which the weights of multiple Biometric features are compared against the images in the database and a weight will be generated. If the weight is above threshold, then the user will be recognized and the first level of authentication will be completed. The second level of authentication for a user is done using One Time Password. But normally these are just random numbers that can be easily judged and hence may pose threat to some sensitive information. As a solution for this problem, the scheme proposed in this paper makes use of Elliptic Curve Cryptography, a public key cryptographic method, to generate One Time Password. As Elliptic Curve Cryptography is a trap door function it is difficult to hack them in the reverse direction due to computational complexity and the uniqueness of the final fused weight value that is used as private key. Hence this proposed system is more reliable than any other conventional systems. INTRODUCTION Random passwords and ID cards have been some of the few traditional methods that are used for identifying an individual. But these methods have become less secure as the threats to hack them are escalating[1] Security is needed for two reasons, to identify the legitimate users and to protect privacy[2].Biometric technology makes use of the subject's biometric traits such as palm print, palm lines, fingerprint, face, iris, etc of the individuals. Each individual poses unique traits. Even identical twins have different biometrics features. So they are very difficult to be replicated and hence they can be reliably used for authentication purposes. Two types of biometrics are Uni instance biometrics and Multiinstance biometrics. Conventional multi instance biometrics methods treat different traits independently[3] However, some special kinds of biometric traits have a similarity and these methods cannot exploit the similarity of different kinds of traits. For example, the left and right palm lines of the same subject are one such kind[4] Multiple biometric features can be fused at different levels such as image level, feature level, decision level and matching score level. One of the more efficient fusion methods is score level fusion[5] This is the first level of authentication provided in our proposed model. The next level of authentication is provided by means of using One Time Password. Nowadays all the systems are using One Time Password to provide authentication[6] But they are normally generated randomly. To make the generated OTP stronger, Elliptic Curve Cryptography (ECC) a very powerful technique is used. Proposed work is enhancing the security using palm line biometrics and OTP generation using ECC. The preference given to ECC over other methods is that it offers high security even with smaller size key, thus reducing computation power, memory and bandwidth[7] OBJECTIVE OF THE RESEARCH WORK The main objective of the paper is to design a system that could check the authenticity of the user. To achieve this, concept of biometrics and OTP are utilized to enhance security. Two levels of authentication are provided .Multiple biometric feature of an individual is used to authorize the user to access the confidential data of the system. This is the first level authentication. OTP is generated using Elliptic Curve Cryptography(ECC) method. ECC is preferred because of its trapdoor function. This is the second level of authentication. A user who passes both levels of authentication successfully, is identified as a legitimate user and is allowed to access the system. LITERATURE SURVEY Yong Xu et al explained various palmprint identification methods. Most notable methods are line based method, coding based method, sub spaced based method and representation based method. Our paper focuses on the use of line based method. David Zhang et al explain the use of gober function to capture the orientation of palm lines. Raghavendra et al has given a overview of ROI extraction. The accurate extraction of ROI plays a crucial role in improving the performance of the overall palmprint recognition. Yong Xu et al has explained processing of sub bands of the image identification. JitendraChaudhari et al explains about the orientation based approach,a best method in palm print matching. The second level of authentication involves the ideas of OTP and ECC. Many authors have exploited the strength of ECC and came up with implementation in various tasks of public key cryptography like authentication, digital signature, key agreement and encryption. Victor S. Miller explains the use of Elliptic curves in Cryptography. He proposed an encryption scheme similar to Diffie Hellman key exchange protocol but faster by around 20 percent. Neal Koblitz explained about the elliptic curves over finite fields for public key cryptosystems. He explained that the discrete logarithm problem is harder for finite group field compared to binary field. He also gave a theorem for non smoothness existing in cyclic subgroup generated by a global point. Neal.Koblitz et al extended the idea of discrete logarithmic problem used in public key cryptography of Diffie Hellman to elliptic curve group. S.S.Tyagi et al enlightens the use of RSA algorithm along with its strengths, weakness and the reason to move to Elliptic Curve Cryptography method (ECC) Nick Sullivan et al explains the security of ECC over RSA algorithm. LaiphrakpamDolendro Singh et al R.Sujatha et al. International Journal of Advanced Engineering Technology E ISSN 0976 3945 Int J Adv Engg Tech/Vol. VII/Issue II/April June,2016/1030 1035 explained the implementation of elliptic curve cryptography. It also explains the various mathematical operations such as point addition, multiplication, subtraction and inverse modulo operation using elliptic curve. Darrel Hankerson et al explained the various elliptic curve arithmetic, issue with implementation and cryptographic protocols in details. Lawrence C. Washington gave proofs to various theories related to elliptic curve. In order to securely transfer image across the network various techniques have been develop in recent years using ECC. Ahmed et al presented an image encryption technique using cyclic elliptic curve and chaotic system. They proposed a technique to generate a pseudo random key stream using cyclic elliptic curve point and chaotic system which in turn is used for encryption of data stream from the image. Hong Liu et al gave a cryptanalysis of image encryption scheme based on hybrid chaotic system and cyclic elliptic curve. They found that knownplain text attack and choosing a plain image with all the pixel value 0 can generate the encrypted image. Maria Celestin Vigila et al proposed an algorithm to perform image encryption using ECC. They use a coupled linear congruential generator to generate the private key and a random integer 'k' To obtain the cipher image point multiplication is performed for each pixel value with the generator to fit into the elliptic curve coordinate. A mapping table is required while performing decryption. Ali Soleymani et al proposed an encryption technique using Elliptic Curve over Prime Group field. They created a mapping table which has values of 0 to 255 along the row and the corresponding row contains the elliptic curve coordinate. Pixel value of the image are mapped onto elliptic curve coordinate using the table and encrypted using the public key of the receiver. To view the encrypted data as cipher image the table is used again to map the values back to the range of 0 to 255. HimikaParmar et al gave a basic idea about one time passwords (OTP) In Wikipedia, advantages of static passwords over dynamic passwords were explained. Tamanna Saini et al, a onetime password generation system is introduced. HimikaParmar et al has explained about the various methods of one time password generation. This paper also focuses on the generation of OTP using image encryption. PROPOSED WORK To overcome the limitation of the uni modal biometric technique[8] and to improve the performance of the biometric system, multimodal biometric methods are designed by using multiple biometrics or using multiple instants of the same biometric trai[9]t, which can be fused at four levels such as image (sensor) level, feature level, matching score level and decision level[10] OTP authentication method has been prevalent in various applications and it is widely accepted and trusted[11] But nowadays, OTP generated are eavesdropped and are used for unethical activities. Hence, a strong method is needed to avoid this OTP hacking[12] .A novel framework is proposed that combines the left and right palmprint at the matching score level and this is followed by the use of OTP that is generated using ECC. Three types of matching scores, which are respectively obtained from the left major palm line matching, right major palm line matching and crossing matching between the left and right training palm, are fused to make the final decision. The framework not only combines the left and right palm line images for identification, but also properly exploits the similarity between the left and right major palm lines of the same subject. If the decision is favourable then the OTP will be generated and will be sent through mail to the registered mail ID. The user is expected to enter the ID. If there is a match, then the user is identified as a legitimate person. BIOMETRIC FUSION BASED DECISION MAKING .Fusion techniques integrate different data sources or multiple classifiers to improve the performance of the system. In multi instance biometric systems, unlike Uni in