RUDBA: Reusable User-Device Biometric Authentication Scheme for Multi-service Systems

The authentication and verification of user and device identities require cost-effective solutions. Two emerging approaches, biometric authentication and devices’ fingerprint, allow users and devices to prove their identity efficiently and securely. Furthermore, users are inclined to register multiple services with the same secret information. Therefore, the potential risks brought by the reuse of secret information need to be taken seriously. This paper proposes the RUDBA scheme, a novel reusable user-device biometric authentication scheme that captures the user's biometrics and the device's fingerprint. The extracted confidential is fused as authentication information for the user-device pair's identity and can provide a symmetric key for the subsequent communication. This scheme is implemented using the public biometric dataset and the intrinsic SRAM PUF data. The experimental results and analysis show that the RUDBA scheme leads to a reliable and reusable users-device authentication system.