arrow
Return

Always Authenticated, Never Exposed: Continuous Authentication via Zero-Knowledge Proofs

delete2026-01-01
delete0
PRE
AI
D
Dennis Hamm *
E
Erwin Kupris
T
Thomas Schreck
DOI:10.1007/978-3-032-06155-3_2delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Continuous authentication enhances security by verifying users beyond their initial login. While it mitigates risks of one-time authentication, it often requires ongoing biometric data transmission, raising privacy concerns due to their sensitivity and non-revocability. To address this, we explore privacy-preserving continuous authentication using Zero-Knowledge Proofs (ZKP), which enable verification without revealing biometric data. We developed and evaluated two continuous authentication protocols: one using interactive ZKPs and another using Non-Interactive ZKPs (NIZKPs). Based on existing work, we selected and adapted a suitable one-time biometric authentication protocol, implemented a proof of concept, and tested different training sizes to optimize the trade-off between execution time and performance. With 30 training users, our system achieved a false acceptance rate of 0.0065, false rejection rate of 0.0048, and execution time of 0.1261 s. The NIZKP variant proved significantly faster due to reduced network overhead. Our approach demonstrates that continuous authentication can be made both secure and privacy-preserving, offering a scalable and highly adaptable alternative for existing systems.
Keywords:
Continuous Authentication
Zero Knowledge Proof
Privacy-Preserving Technology

Journal

S
SECURITY AND TRUST MANAGEMENT, STM 2025
IF:
0
Papers:
12
Citations:
0

Organization

U
University of Munich
Scholars:
5.7W
Papers: 4.2W
Citations: 68