A New Advanced User Authentication and Confidentiality Security Service

Sanjay Majumder,Sanjay Chakraborty,Suman Das

DOI: https://doi.org/10.5120/16257-5904

2014-06-18

Abstract:Network & internet security is the burning question of today's world and they are deeply related to each other for secure successful data transmission. Network security approach is totally based on the concept of network security services. In this paper, a new system of network security service is implemented which is more secure than conventional network security services. This technique is mainly deals with two essential network security services, one is user authentication and other is data confidentiality. For user authentication this paper introduces Graphical Username & Voice Password approaches which provides better security than conventional username & password authentication process. In data confidentiality section this paper introduces two layer private key for both message encryption & decryption which is mainly applicable on 8 bit plain text data. This paper also provides the hints of introducing other two network security services (integrity and non-repudiation) as a future work.

Cryptography and Security

What problem does this paper attempt to address?

This paper attempts to solve two key problems in network and Internet security: user authentication and data confidentiality. Specifically:

1. **User Authentication**: The traditional username - and - password authentication method has security risks. Short passwords are easy to be cracked, while long alphanumeric passwords are difficult to remember. For this reason, the paper proposes a new authentication method, namely "graphical username" and "voice password". This method improves the security of authentication by allowing users to select a specific sequence of pictures as their usernames and using the users' voices as passwords.

2. **Data Confidentiality**: The traditional one - time private - key encryption method has insufficient security during the data encryption and decryption processes. The paper proposes a two - layer private - key encryption scheme for the encryption and decryption processes of 8 - bit plaintext data. This two - layer encryption mechanism improves the security and confidentiality of data by adding encryption levels.

The main contribution of the paper is to provide a user authentication and data confidentiality system that is more secure than traditional network services, aiming to improve the information security level in network transmissions. In addition, the paper also mentions the direction of future work, including introducing integrity and non - repudiation services to build a complete network security software service and further ensure the security of data transmissions.