Go to IEEE AIC 2025 Conference homepageIris-Based Authentication and Key Agreement With Updatable Blind Credentials
Authentication and key agreement (AKA) protocols are essential for secure network communications, traditionally relying on encryption keys or user-generated passwords, which are prone to vulnerabilities like theft or weak entropy. Biometric-based AKA systems, particularly iris-based methods, offer enhanced security but introduce critical risks due to the immutability of biometric data, which becomes highly sensitive if compromised. Current systems often require servers to access raw biometric data or impose substantial computational and storage loads, making them inefficient and less secure. This paper proposes a novel iris-based privacy- preserving authentication framework integrated with an advanced Information-Invisibility Key Agreement (II-KA) protocol. By employing certificate obfuscation techniques, the framework ensures that iris data remains concealed from servers while enabling secure and anonymous authentication. Furthermore, the renewable Iris-Based Credential AKA (IBC- AKA) protocol allows blind updates of credentials, reducing the risks of server-side breaches and ensuring the resilience of user data. The proposed system demonstrates linear computational complexity between clients and interaction environments, significantly reducing server storage requirements by up to 100 times compared to existing methods and achieving at least a fourfold improvement in runtime efficiency. These advancements make the proposed framework a robust, scalable, and transformative solution for secure biometric-based authentication in modern networked environments.