A Secure Authentication System for Distributed Computing Environment Based on PKI Biometric Verification and Kerberos

Abstract

Today, the most widely-used authentication protocol is Kerberos. But Kerberos has potential weaknesses which result from its password based architecture, purely symmetric cryptography, and the assumption that client can securely protect users’ verification documents. In this paper, we propose a secure authentication system based on Kerberos, biometric verification, and public-key technology. Our system is expected to achieve five goals: user convenience, storage security, robust authentication, administrator management, and attack resistance.