Assessment of Remote Biometric Authentication Systems: Another Take on the Quest to Replace Passwords

Assessment of Remote Biometric Authentication Systems: Another Take on the Quest to Replace Passwords

연구 분야: Analysis

학회: 2021 IEEE 5th International Conference on Cryptography, Security and Privacy (CSP)

Passwords are often criticized due to being prone to misuses such as bad password creation and management practices. Experts usually advise using other forms of authentication. While there are plenty of alternative authentication methods available, an overall assessment often proves to be challenging. This is because of aspects such as differences in security techniques, different applicability of the system, or varying difficulties of implementation. To tackle the issue of comparing different authentication systems, unified criteria are needed. Bonneau et al. proposed a framework for comparing authentication schemes in their “The Quest to Replace Passwords”. We contribute to the quest by providing information and assessment on the previously unassessed Remote Biometric Authentication Systems, thus increasing the variety of analyzed systems. We achieve this by analyzing six exemplary implementations. To enable proper evaluation of the details of that new category of authentication schemes, this work furthermore expands the framework by the two aspects Resilient-to-Biometric-Loss and No-Trusted-Execution-Environments.