Go to IEEE AIC 2026 Conference homepageIris-Based Authentication and Key Agreement With Updatable Blind Credentials
Keywords: Iris, authentication and key agreement, renewable credentials, privacy-preserving, certificate obfuscation, biometric security, information invisibility, server-side efficiency, computational scalability.
TL;DR: Authentication and key agreement (AKA) protocols
Abstract: Authentication and key agreement (AKA)
protocols are essential for secure network communications,
traditionally relying on encryption keys or user-generated
passwords, which are prone to vulnerabilities like theft or weak
entropy. Biometric-based AKA systems, particularly iris-based
methods, offer enhanced security but introduce critical risks due
to the immutability of biometric data, which becomes highly
sensitive if compromised. Current systems often require servers
to access raw biometric data or impose substantial
computational and storage loads, making them inefficient and
less secure. This paper proposes a novel iris-based privacy-
preserving authentication framework integrated with an
advanced Information-Invisibility Key Agreement (II-KA)
protocol. By employing certificate obfuscation techniques, the
framework ensures that iris data remains concealed from
servers while enabling secure and anonymous authentication.
Furthermore, the renewable Iris-Based Credential AKA (IBC-
AKA) protocol allows blind updates of credentials, reducing the
risks of server-side breaches and ensuring the resilience of user
data. The proposed system demonstrates linear computational
complexity between clients and interaction environments,
significantly reducing server storage requirements by up to 100
times compared to existing methods and achieving at least a
fourfold improvement in runtime efficiency. These
advancements make the proposed framework a robust, scalable,
and transformative solution for secure biometric-based
authentication in modern networked environments.
Submission Number: 1
Loading