1,2, Pause: Lets Start by Meaningfully Navigating the Current Online Authentication Solutions Space

Abstract

Consuming services online is an exponentially growing trend within different industries. A robust online authentication solution to these services is a critical requirement for establishing trust between end users and service providers. Currently, the shortcomings of password based authentication solutions are well recognized.Hence, many alternative strong authentication solutions are being adopted. However, the latter create a siloed model where each service provider dictates a different method (OTP, SMS...) to end users. To resolve these challenges, considerable efforts are being deployed by both academia and industry. However, assessing these efforts is not a trivial task. This paper provides a framework of a well-motivated set of attributes, for categorizing and assessing online authentication solutions. Based on this framework, two main approaches for online authentication are identified and exemplified: LUCIDMAN and FIDO. The results of this research are anticipated to make the navigation of the online authentication solutions space more systematic, and facilitate knowledge transfer between all stakeholders.

Secure Authentication Key Sharing between Personal Mobile Devices Based on Owner Identity

“…In such a federated use case, the user has to register the new device again, not to all Web accounts but only to the identity provider. However, not all Web accounts will rely on a single identity provider [34]; thus, the user still has to complete the registration for all identity providers the user is using and for Web accounts that do not rely on any identity providers. The Client-to-Authenticator-Protocol (CTAP) [35] enables multiple client devices (PC, phones, etc.)…”