The WebID Protocol Enhanced with Biometrics and a Federated Enrollment Protocol

We are seamlessly integrating biometrics into the WebID decentralized authentication protocol. This involves constructing a method of user verification that allows for simple, easy, and safe access. WebIDs provide such things when compared to the traditional username and password user authentication. However, with the use of WebIDs, important information can be stolen if an attacker either gains direct access to the user's computer. This possibility can be blocked with the inclusion of biometrics to the authentication process since biometric data (e.g., fingerprints, iris scan) is unique and not easily duplicated. We first created an enrollment protocol that verifies whether a user has a WebID while attempting to access a server. If they do, we permit the use to have access to the server, and if they do not, we register the user by accessing their own server. Implementing these features in the WebID protocol would significantly improve the security of user authentication.