Abstract

Abstract: In web applications, userauthentication is normally based on username and password, come forth biometricsolutions allow biometric data during session establishment. But in Unimodalbiometric approaches only use a single verification is considered and theidentity of the user is permanent during the entire session. A secure protocolis defined for constant authentication through continuous user verification.Biometric techniques suggest solution for secure, trusted and protected authentication.In between the logging session time, the one-time-password (OTP) is send onusers registered email id and also randomly one questions will be asked to theuser between the 5-10 mints. The user’s identity has been verified, the systemresources are available for fixed period of time and identity of the user isconstant during entire session. The proposed system detects misuses of computerresources and prevents malicious activities based on multi-modal biometriccontinuous authentication. Biometric and user information’s are stored in smartphones and web services

Keywords:Authentication,Security, Mobile environments, web servers