Published Paper Details:

Session control in distributed web services is traditionally based mostly on username and password, specific logouts and mechanisms of user session expiration using conventional timeouts. Emerging biometric alternatives allow substituting username and password with biometric data throughout session establishment, but in any such method though a single verification is deemed sufficient, and the identity of a user is appeared immutable throughout the entire session. Additionally, the duration of the session timeout may also additionally have an effect at the usability of the service and consequent customer satisfaction. This project explores promising alternatives offered via utilizing biometrics in the management of sessions. A secure protocol is defined for perpetual authentication via continuous user verification. The protocol determines adaptive timeouts primarily based totally mostly on the quality, frequency and sort of biometric data transparently acquired from the user. Finally, the current prototype is discussed.