Digital Forensic Authentication and Key Agreement Protocol for Biometric-Based Consumer Electronics Devices
Abstract
Digital forensics and biometric authentication play a crucial role in ensuring security in consumer electronics, particularly in intelligent wearable devices. These devices collect users’ health data and transmit it to cloud servers via wireless channels, exposing them to computational delays and security threats. While fog computing enhances cloud computing by improving response efficiency, it also introduces higher security requirements. This paper proposes a secure and efficient Authentication and Key Agreement (AKA) protocol tailored for biometric systems in consumer electronics, leveraging the Elliptic Curve Diffie-Hellman (ECDH) problem. The protocol integrates smart cards, passwords, and biometric authentication techniques, employing one-way hash functions and elliptic curves to safeguard user anonymity. Additionally, it utilizes random numbers and timestamps to ensure the integrity of transmitted messages, enabling mutual identity authentication and establishing a three-party session key. An informal security analysis confirms that the protocol can withstand various known cyber threats, while its robustness is further validated using the Random Oracle (ROR) model and the ProVerif formal security tool. Comparative analysis with existing protocols reveals that the proposed method reduces computational overhead to 66% of conventional solutions while offering superior security and performance, making it highly suitable for secure biometric systems in consumer electronics and digital forensic applications.