Multi-level Authentication Scheme Utilizing Smart Cards and Biometrics

Authentication is an important part of security area. Smart Cards and Biometrics are widely used in authentication schemes. In this work, we propose a novel architecture and scheme for remote authentication. In this architecture, authentication level is decided by a policy server. The scheme provides an ability to use three authentication factors within different levels. Additional credentials are requested from user upon the authentication level determined by the policy server. The proposed scheme is designed to resist well-known attacks like replay and forgery attacks. At the same time, it fulfills many requirements expected from authentication schemes like mutual authentication and not to keep verification table. We also compared our scheme with well known schemes in the literature.