Student or educator? Sign up with your school email and get 6 months of Pro free.
CoChat
Sign Up
Cited by 434

The DOI matches its Crossref record; 142 of the 142 references it cites were found in a registry or an index.

Multi-Factor Authentication: A Survey

Open access
Ometov, Aleksandr, Bezzateev, Sergey, Mäkitalo, Niko, Andreev, Sergey, Mikkonen, Tommi, Koucheryavy, Yevgeni·2018·Cryptography
DOI 10.3390/cryptography2010001
Open this paper in CoChat — free account

Abstract

Today, digitalization decisively penetrates all the sides of the modern society. One of the key enablers to maintain this process secure is authentication. It covers many different areas of a hyper-connected world, including online payments, communications, access right management, etc. This work sheds light on the evolution of authentication systems towards Multi-Factor Authentication (MFA) starting from Single-Factor Authentication (SFA) and through Two-Factor Authentication (2FA). Particularly, MFA is expected to be utilized for human-to-everything interactions by enabling fast, user-friendly, and reliable authentication when accessing a service. This paper surveys the already available and emerging sensors (factor providers) that allow for authenticating a user with the system directly or by involving the cloud. The corresponding challenges from the user as well as the service provider perspective are also reviewed. The MFA system based on reversed Lagrange polynomial within Shamir’s Secret Sharing (SSS) scheme is further proposed to enable more flexible authentication. This solution covers the cases of authenticating the user even if some of the factors are mismatched or absent. Our framework allows for qualifying the missing factors by authenticating the user without disclosing sensitive biometric data to the verification entity. Finally, a vision of the future trends in MFA is discussed.

Overview

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.3390/cryptography2010001

Cites

142 of 142 references verified0 citation errors · 0 not checkable

Statistics

Verification

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Citations

Cites

Research works printed but not linked: 63

  1. Roy, S., and Khatwani, C. (2017). Cryptanalysis and Improvement of ECC Based Authentication and Key Exchanging Protocols. Cryptography, 1. · doi:10.3390/cryptography1010009
  2. Boyd, C., and Mathuria, A. (2013). Protocols for Authentication and Key Establishment, Springer.
  3. Balloon, 2001, From Wax Seals to Hypertext: Electronic Signatures, Contract Formation, and a New Model for Consumer Protection in Internet Transactions, Emory Law J., 50, 905
  4. Konoth, R.K., van der Veen, V., and Bos, H. (2016, January 22–26). How anywhere computing just killed your phone-based two-factor authentication. Proceedings of the International Conference on Financial Cryptography and Data Security, Christ Church, Barbados. · doi:10.1007/978-3-662-54970-4_24
  5. Kim, 2011, A method of risk assessment for multi-factor authentication, J. Inf. Process. Syst., 7, 187, 10.3745/JIPS.2011.7.1.187 · doi:10.3745/jips.2011.7.1.187
  6. Wang, 2013, Security analysis of MD5 algorithm in password storage, Appl. Mech. Mater., 347, 2706
  7. Bruun, A., Jensen, K., and Kristensen, D. (2014, January 16–18). Usability of Single- and Multi-factor Authentication Methods on Tabletops: A Comparative Study. Proceedings of the International Conference on Human-Centred Software Engineering, Paderborn, Germany. · doi:10.1007/978-3-662-44811-3_22
  8. Harini, 2013, 2CAuth: A new two factor authentication scheme using QR-code, Int. J. Eng. Technol., 5, 1087
  9. Squicciarini, 2007, Privacy preserving multi-factor authentication with biometrics, J. Comput. Secur., 15, 529, 10.3233/JCS-2007-15503 · doi:10.3233/jcs-2007-15503
  10. National Research Council, and Whither Biometrics Committee (2010). Biometric Recognition: Challenges and Opportunities, National Academies Press.
  11. Tahir, H., and Tahir, R. (2008, January 2–4). BioFIM: Multifactor Authentication for Defeating Vehicle Theft. Proceedings of the World Congress on Engineering, London, UK.
  12. Khan, R., Hasan, R., and Xu, J. (April, January 30). SEPIA: Secure-PIN-authentication-as-a-service for ATM using mobile and wearable devices. Proceedings of the 3rd IEEE International Conference on Mobile Cloud Computing, Services, and Engineering (MobileCloud), San Francisco, CA, USA.
  13. Adeoye, 2012, Evaluating the performance of two-factor authentication solution in the banking sector, Int. J. Comput. Sci., 9, 457
  14. Parmar, D.N., and Mehta, B.B. (arXiv, 2014). Face recognition methods & applications, arXiv.
  15. Sunehra, 2014, Fingerprint based biometric ATM authentication system, Int. J. Eng. Invent., 3, 22
  16. Dmitrienko, A., and Plappert, C. (2017, January 22–24). Secure free-floating car sharing for offline cars. Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy, Scottsdale, AZ, USA. · doi:10.1145/3029806.3029807
  17. and Chatterjee, K. (2016, January 29–30). Authentication techniques for e-commerce applications: A review. Proceedings of the International Conference on Computing, Communication and Automation (ICCCA), Noida, India.
  18. Fan, 2017, An ultra-lightweight RFID authentication scheme for mobile commerce, Peer-to-Peer Netw. Appl., 10, 368, 10.1007/s12083-016-0443-6 · doi:10.1007/s12083-016-0443-6
  19. Nor, 2015, The Proposed Public Key Infrastructure Authentication Framework (PKIAF) for Malaysian Government Agencies, Adv. Sci. Lett., 21, 3161, 10.1166/asl.2015.6512 · doi:10.1166/asl.2015.6512
  20. Grigoras, 2009, Applications of ENF analysis in forensic authentication of digital audio and video recordings, J. Audio Eng. Soc., 57, 643
  21. Han, K., Potluri, S.D., and Shin, K.G. (2013, January 8–11). On authentication in a connected vehicle: Secure integration of mobile devices with vehicular networks. Proceedings of the International Conference on Cyber-Physical Systems (ICCPS), Philadelphia, PA, USA. · doi:10.1145/2502524.2502546
  22. Chaurasia, 2011, Infrastructure based authentication in VANETs, Int. J. Multimed. Ubiquitous Eng., 6, 41
  23. Clarke, N. (2011). Transparent User Authentication: Biometrics, RFID and Behavioural Profiling, Springer. · doi:10.1007/978-0-85729-805-8
  24. Kun, A.L., Royer, T., and Leone, A. (2013, January 28–30). Using tap sequences to authenticate drivers. Proceedings of the 5th International Conference on Automotive User Interfaces and Interactive Vehicular Applications, Eindhoven, The Netherlands. · doi:10.1145/2516540.2516567
  25. Busold, C., Taha, A., Wachsmann, C., Dmitrienko, A., Seudié, H., Sobhani, M., and Sadeghi, A.R. (2013, January 18–20). Smart keys for cyber-cars: Secure smartphone-based NFC-enabled car immobilizer. Proceedings of the 3rd ACM Conference on Data and Application Security and Privacy, San Antonio, TX, USA. · doi:10.1145/2435349.2435382
  26. Acharya, 2013, Two factor authentication using smartphone generated one time password, J. Comput. Eng. (IOSR-JCE), 11, 85, 10.9790/0661-1128590 · doi:10.9790/0661-1128590
  27. Ogiela, 2015, Biometric watermarks based on face recognition methods for authentication of digital images, Secur. Commun. Netw., 8, 1672, 10.1002/sec.1114 · doi:10.1002/sec.1114
  28. Guo, J.M., Liu, Y.F., Chu, M.H., Wu, C.C., and Le, T.N. (2011, January 11–14). Contact-free hand geometry identification system. Proceedings of the 18th IEEE International Conference on Image Processing (ICIP), Brussels, Belgium. · doi:10.1109/icip.2011.6116345
  29. Kumar, A., Hanmandlu, M., Madasu, V.K., and Lovell, B.C. (2009, January 1–3). Biometric authentication based on infrared thermal hand vein patterns. Proceedings of the Digital Image Computing: Techniques and Applications (DICTA’09), Melbourne, Australia. · doi:10.1109/dicta.2009.63
  30. Piekarczyk, M., and Ogiela, M.R. (2017). Touch-Less Personal Verification Using Palm and Fingers Movements Tracking. New Trends in Analysis and Interdisciplinary Applications, Springer. · doi:10.1007/978-3-319-48812-7_76
  31. Tome, P., Vanoni, M., and Marcel, S. (2014, January 10–12). On the vulnerability of finger vein recognition to spoofing. Proceedings of the International Conference of the Biometrics Special Interest Group (BIOSIG), Darmstadt, Germany.
  32. Tome, P., and Marcel, S. (2015, January 9–22). On the vulnerability of palm vein recognition to spoofing attacks. Proceedings of the International Conference on Biometrics (ICB), Phuket, Thailand. · doi:10.1109/icb.2015.7139056
  33. Jain, A., Bolle, R., and Pankanti, S. (2006). Biometrics: Personal Identification in Networked Society, Springer.
  34. Buriro, A., Crispo, B., Del Frari, F., and Wrona, K. (2015, January 22–24). Touchstroke: Smartphone user authentication based on touch-typing biometrics. Proceedings of the International Conference on Image Analysis and Processing, Niagara Falls, ON, Canada. · doi:10.1007/978-3-319-23222-5_4
  35. Sae-Bae, N., Ahmed, K., Isbister, K., and Memon, N. (2006, January 22–27). Biometric-rich gestures: A novel approach to authentication on multi-touch devices. Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, Montreal, QC, Canada.
  36. Figueira, C., Matias, R., and Gamboa, H. (2016, January 21–23). Body Location Independent Activity Monitoring. Proceedings of the International Joint Conference on Biomedical Engineering Systems and Technologies (BIOSIGNALS), Rome, Italy. · doi:10.5220/0005699601900197
  37. Grankin, M., Khavkina, E., and Ometov, A. (2012, January 5–9). Research of MEMS accelerometers features in mobile phone. Proceedings of the 12th Conference of Open Innovations Association FRUCT, Oulu, Finland. · doi:10.23919/fruct.2012.8122083
  38. Igarashi, K., Miyajima, C., Itou, K., Takeda, K., Itakura, F., and Abut, H. (2004, January 27–30). Biometric identification using driving behavioral signals. Proceedings of the International Conference on Multimedia and Expo, Taipei, Taiwan.
  39. Oliver, N., and Pentland, A.P. (2000, January 24–28). Driver behavior recognition and prediction in a SmartCar. Proceedings of the International Society for Optics and Photonics Meeting, Orlando, FL, USA.
  40. Xiao, L., Chen, T., Han, G., Zhuang, W., and Sun, L. (2016, January 4–8). Channel-Based Authentication Game in MIMO Systems. Proceedings of the Global Communications Conference (GLOBECOM), Washington, DC, USA. · doi:10.1109/glocom.2016.7841657
  41. Silva, H., Lourenço, A., and Fred, A. (2012, January 14–17). In-vehicle driver recognition based on hand ECG signals. Proceedings of the International conference on Intelligent User Interfaces, Lisbon, Portugal. · doi:10.1145/2166966.2166971
  42. Paranjape, R., Mahovsky, J., Benedicenti, L., and Koles, Z. (2001, January 13–16). The electroencephalogram as a biometric. Proceedings of the Canadian Conference on Electrical and Computer Engineering, Toronto, ON, Canada.
  43. Mohanchandra, 2013, Using brain waves as new biometric feature for authenticating a computer user in real-time, Int. J. Biom. Bioinform. (IJBB), 7, 49
  44. Reid, Y., Storts, D., Riss, T., and Minor, L. (2018, January 04). Authentication of Human Cell Lines by STR DNA Profiling Analysis, Available online: https://www.ncbi.nlm.nih.gov/books/NBK144066/.
  45. Yun, 2002, The ‘123’ of biometric technology, Synth. J., 3, 83
  46. Kraus, L., Antons, J.N., Kaiser, F., and Möller, S. (2016, January 29–31). User experience in authentication research: A Survey. Proceedings of the PQS 2016, Berlin, Germany. · doi:10.21437/pqs.2016-8
  47. Katsini, C., Belk, M., Fidas, C., Avouris, N., and Samaras, G. (2016, January 10–12). Security and Usability in Knowledge-based User Authentication: A Review. Proceedings of the 20th Pan-Hellenic Conference on Informatics, Patras, Greece. · doi:10.1145/3003733.3003764
  48. Ogiela, M.R., and Ogiela, L. (2017, January 24–26). Behavioral Keys in Cryptography and Security Systems. Proceedings of the International Conference on Intelligent Networking and Collaborative Systems, Toronto, ON, Canada. · doi:10.1007/978-3-319-65636-6_26
  49. Aumi, M.T.I., and Kratz, S. (2014, January 23–26). AirAuth: Evaluating in-air hand gestures for authentication. Proceedings of the 16th International Conference on Human-Computer Interaction with Mobile Devices & Services, Toronto, ON, Canada. · doi:10.1145/2628363.2628388
  50. Maple, C., and Norrington, P. (2006, January 20–22). The usability and practicality of biometric authentication in the workplace. Proceedings of the First International Conference on Availability, Reliability and Security, Vienna, Austria. · doi:10.1109/ares.2006.133
  51. Matyáš, V., and Říha, Z. (2002). Biometric authentication–security and usability. Advanced Communications and Multimedia Security, Springer. · doi:10.1007/978-0-387-35612-9_17
  52. Tolosana, 2015, Preprocessing and feature selection for improved sensor interoperability in online biometric signature verification, IEEE Access, 3, 478, 10.1109/ACCESS.2015.2431493 · doi:10.1109/access.2015.2431493
  53. Galbally, J., and Satta, R. (2016, January 24–26). Biometric Sensor Interoperability: A Case Study in 3D Face Recognition. Proceedings of the ICPRAM, Rome, Italy. · doi:10.5220/0005682501990204
  54. Bandara, H., De Silva, S.R.P., and Weerasinghe, P.D. (2015, January 24–26). The universal biometric system. Proceedings of the International Conference on Advances in ICT for Emerging Regions, Colombo, Sri Lanka.
  55. Biggio, 2012, Security evaluation of biometric authentication systems under real spoofing attacks, IET Biom., 1, 11, 10.1049/iet-bmt.2011.0012 · doi:10.1049/iet-bmt.2011.0012
  56. Chen, B., and Chandran, V. (2010, January 14–19). Biometric template security using higher order spectra. Proceedings of the International Conference on Acoustics Speech and Signal Processing (ICASSP), Dallas, TX, USA. · doi:10.1109/icassp.2010.5495464
  57. Fierrez, 2007, BioSec baseline corpus: A multimodal biometric database, Pattern Recognit., 40, 1389, 10.1016/j.patcog.2006.10.014 · doi:10.1016/j.patcog.2006.10.014
  58. Fierrez, 2010, BiosecurID: A multimodal biometric database, Pattern Anal. Appl., 13, 235, 10.1007/s10044-009-0151-4 · doi:10.1007/s10044-009-0151-4
  59. Lichtman, 2016, LTE/LTE-A jamming, spoofing, and sniffing: Threat assessment and mitigation, IEEE Commun. Mag., 54, 54, 10.1109/MCOM.2016.7452266 · doi:10.1109/mcom.2016.7452266
  60. Ratha, N., and Bolle, R. (2007). Automatic Fingerprint Recognition Systems, Springer.
  61. Dehkordi, 2008, An efficient threshold verifiable multi-secret sharing, Comput. Stand. Interfaces, 30, 187, 10.1016/j.csi.2007.08.004 · doi:10.1016/j.csi.2007.08.004
  62. Ogiela, L., Ogiela, M.R., and Takizawa, M. (2017, January 27–29). Safety and Standardization of Data Sharing Techniques and Protocols for Management of Strategic Data. Proceedings of the 31st International Conference on Advanced Information Networking and Applications (AINA), Taipei, Taiwan. · doi:10.1109/aina.2017.169
  63. Biometric Signature ID (2018, January 04). Biometric signature ID Scores an Outstanding 99.97% Accuracy against Identity Fraud from Tolly Group. Available online: https://www.biosig-id.com/news-and-events/press-releases/193-biometric-signature-id-scores-an-outstanding-99-97-accuracy-against-identity-fraud-from-tolly-group.

Cited by

See all 434

Metadata

Authors
Ometov, A., Bezzateev, S., Mäkitalo, N., Andreev, S., Mikkonen, T., & Koucheryavy, Y.
Venue
Cryptography
Publisher
MDPI AG
Published
2018-01-05
Volume
2
Issue
1
Pages
1
ISSN
2410-387X (ISSN-L)
DOI
10.3390/cryptography2010001
OpenAlex
W2784017372
Cited by
434
References
142
FWCI
44.19
Type
journal article
Language
en
Open access
gold
Licence
creativecommons.org/licenses/by/4.0/ (vor)

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

Data sources

Bibliographic data: Semantic Scholar, OpenAlex, Crossref.

Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).

Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.