As you might be aware that work on FIDO (Fast IDentity Online - passwordless authentication standard) started in 2009 but the idea to use biometrics based authentication using mobile phone/laptops etc. and public key cryptography as an alternate solution to password based authentication was proposed in my paper "Novel biometric digital signatures for internet-based applications" way back in 2001 published in UK journal "Information Management and Computer Security". Detailed description also appears in my Master thesis submitted to NTU Singapore in 2002 on the same topic. Biometrics based cryptography key generation can be achieved in 3 ways: direct key generation, key release (e.g. FIDO) and key binding (e.g. bioscrypt, fuzzy vault etc.). My work focused on key generation using biometrics. Although this work does not talk about secure enclave / trusted execution environment / TPM within mobile phone/laptops to store biometrics and key in tamper proof manner because that technology was not yet evolved at that time, it did propose to use mobile phones/laptops/computers/PDAs etc. to capture live biometrics and use that with public key cryptography (RSA and DSA algorithms) for digital signatures for user authentication and authorization using some challenge response method to avoid passwords completely which is the core concept behind FIDO. My proposal addressed key management issue in PKI and prevented misuse of biometric templates by avoiding storage of biometric templates in central database. It also provided mechanism to generate multiple keys using same biometric without forfeiting the use of biometrics in future in case of key compromise. This work was carried out in consultation with MIT (USA) Professor Ronald Rivest (inventor of RSA algorithm and Turing award winner) and Cambridge University (UK) Professor John Daugman (inventor of iris recognition) and was cited by Anil Jain (distinguished biometrics scientist, USA). This research was also highlighted in "Infocomm Security Technologies for E-Commerce" report published by Singapore Government in ITR4 2002 and has been cited in over 130 papers and 10 USA patents.
All my 5 papers that I wrote during 2001-2002 time frame on biometrics and cryptography based digital signatures are cited in the USA patent by Cisco - "Biometric Non-repudiation Network Security Systems and Methods", patent number US-7623659-B2 granted in 2009. This USA patent is cited in most of the early patents by FIDO founder Ramesh Kesanupalli that formed the basis for FIDO protocol for passwordless authentication and passkeys which are billion dollar technologies now. Passkeys are being used by companies like Microsoft, Google and Apple and other FIDO alliance members in their products.
My key publications on biometrics based digital signatures (Biometric Signatures) are listed below*:
P. K. Janbandhu, M. Y. Siyal, "Novel Biometric Digital Signatures for Internet-based Applications," Information Management and Computer Security (IMCS) journal, Emerald Publishing Group, United Kingdom, vol. 9, issue 5, pp. 205 - 212, 2001.
P. K. Janbandhu, M. Y. Siyal, "A new biometric based Signature system," Proceedings of IEEE International Conference on Information, Communications and Signal Processing, ICICS Singapore, paper no.: P0305, Oct. 2001.
P. K. Janbandhu, M. Y. Siyal, "Modified Private Key Generation for Biometric Signatures," book chapter in “Advances in Automation, Multimedia and Video Systems, and Modern Computer Science," by WSEAS Press (Europe), pp. 314-319, 2001.
P. K. Janbandhu, M. Y. Siyal, "Modified Private Key Generation for Biometric Signatures," Proceedings of IEEE/WSES International Conference on Multimedia, Internet and Video Technologies, MIV Malta (Europe) · Sep 1, 2001.
P. K. Janbandhu, M. Y. Siyal, "Digital Signature Generation using Biometrics," EEE Research Bulletin, School of EEE, NTU Singapore · Jan, 2002.
P. K. Janbandhu, "Novel biometric digital signature system for electronic commerce applications," Master of Engineering Thesis (School of Electrical and Electronic Engineering, NTU Singapore) , Oct. 2002.
Other Publications:
- P. K. Janbandhu, "Designing a Parallel-to-Serial Port Adapter," Dr Dobb’s Journal (USA), Feb 24, 2010.
(based on work done in B-Tech final year project at IIT Bombay during 1998-99).
*Full text for all of the above publications is available on Researchgate.
Key patents by FIDO founder Ramesh Kesanupalli that cites Cisco patent US-7623659-B2/US20070106895A1 which referred all 5 of my papers on biometric signatures are listed below:
- US8799666B2 - "Secure user authentication using biometric information" (filed 2009, granted 2014).
- US8904495B2 - "Secure transaction systems and methods" (filed 2010, granted 2014).
- US10270748B2 - "Advanced authentication techniques and applications" (filed 2014, granted 2019).
- US11929997B2 - "Advanced authentication techniques and applications" (filed 2019, granted 2024).
Other US patent applications include US20110083170A1, US20110082802A1, US20110082800A1, US20110082791A1, US20110082801A1, US20100083000A1, US20110138450A1, US20110083018A1.
-- Pawan Kumar Janbandhu
(B-Tech, 1999 from IIT-Bombay and MEng., 2002 from NTU Singapore)
Top comments (0)