.png){kind=icon}
返回
Auth4App: Streamlining authentication for integrated cyber-physical environments
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jisa.2024.103802.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The growing integration of mobile applications for user authentication has revolutionized user interactions with digital platforms, offering novel possibilities in user experience (UX). However, this paradigm shift poses significant security challenges. Leveraging smartphones for authentication purposes provides convenient and swift access to services, streamlining user interactions with various platforms through simple taps. Several institutions adopt static QR Codes generated from primary, unchanging user data (e.g., individual citizen national identification numbers) for physical authentication procedures like access turnstiles. However, relying on static data introduces critical security vulnerabilities as this data is susceptible to compromise. Implementing an One -Time Authentication Code (OTAC) approach appears promising in addressing these issues. Nevertheless, the absence of an integrated solution for developing a physical authentication process using OTAC leads to suboptimal API user experiences (UX APIs) and subsequent security vulnerabilities. In response to this challenge, we introduce Auth4App, a protocol set designed for identification and authentication using mobile applications. Auth4App comprises two core protocols: one dedicated to linking user credentials to mobile devices (i.e., identification), and the other for generating OTAC. We showcase the adaptability and practicality of Auth4App through three distinct case studies: a mobile -only scenario, integration of mobile devices with a turnstile, and integration of Auth4App with FIDO2. To ensure the robustness of the security protocols, Auth4App is evaluated using automated verification tools and argument proofs, solidifying the system's reliability.
Keyword:
Authentication protocol
One-time authorization code
Binding protocol
Mobile application
期刊
IF:
3.7
论文数:
2.0K
被引数:
4.9K
机构
引用论文
TPTVer: A Trusted Third Party Based Trusted Verifier for Multi-Layered Outsourced Big Data System in Cloud Environment.png)
CHINA COMMUNICATIONS
CHINA COMMUNICATIONSIF3.1
PREAI
分享收藏Effect of treatment of rats with dexamethasone in vivo on gluconeogenesis and metabolite compartmentation in subsequently isolated hepatocytes用dexamethasone in vivo处理大鼠对随后分离的肝细胞中糖异生和代谢物区室化的影响
OAAI
OAAI分享收藏A survey on multi-factor authentication for online banking in the wild网上银行多因素认证的调查研究COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏Google Scholar to overshadow them all? Comparing the sizes of 12 academic search engines and bibliographic databasesSCIENTOMETRICSOAAI
SCIENTOMETRICSIF3.5
OAAI分享收藏
查看更多内容