Author:
Lone Sajaad Ahmed,Mir Ajaz Hussain
Abstract
Purpose
Because of the continued use of mobile, cloud and the internet of things, the possibility of data breaches is on the increase. A secure authentication and authorization strategy is a must for many of today’s applications. Authentication schemes based on knowledge and tokens, although widely used, lead to most security breaches. While providing various advantages, biometrics are also subject to security threats. Using multiple factors together for authentication provides more certainty about a user’s identity; thus, leading to a more reliable, effective and more difficult for an adversary to intrude. This study aims to propose a novel, secure and highly stable multi-factor one-time password (OTP) authentication solution for mobile environments, which uses all three authentication factors for user authentication.
Design/methodology/approach
The proposed authentication scheme is implemented as a challenge-response authentication where three factors (username, device number and fingerprint) are used as a secret key between the client and the server. The current scheme adopts application-based authentication and guarantees data confidentiality and improved security because of the integration of biometrics with other factors and each time new challenge value by the server to client for OTP generation.
Findings
The proposed authentication scheme is implemented on real android-based mobile devices, tested on real users; experimental results show that the proposed authentication scheme attains improved performance. Furthermore, usability evaluation proves that proposed authentication is effective, efficient and convenient for users in mobile environments.
Originality/value
The proposed authentication scheme can be adapted as an effective authentication scheme to accessing critical information using android smartphones.
Subject
General Computer Science,Theoretical Computer Science
Reference77 articles.
1. Biometrics: Personal identification in networked security, personal identification in networked society,1999
2. A comprehensive study on multifactor authentication schemes;In Advances in Intelligent Systems and Computing,2013
3. Secure password authentication system uisng smart card;International Journal of Emerging Trends and Technology in Computer Science (IJETTCS),2014
4. 2FA might be secure, but it’s not usable: a summative usability assessment of google’s two-factor authentication (2FA) methods;Proceedings of the Human Factors and Ergonomics Society Annual Meeting,2018
5. [THESIS] a framework for measuring the usability issues and criteria of mobile learning applications,2013
Cited by
6 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献