A qualitative study on usability and acceptability of Yubico security key

Authentication of IoT Device and IoT Server Using Security Key

“…The need to authenticate IoT servers and IoT devices using security keys has attracted the attention of different groups of researchers and scholars in the eld of information technology. According to [10], authentication of online accounts is something that many people understand as something you have, something you are, or something you know. This partly implies the use of passphrases, PINs, and passwords as knowledge; physical tokens as possessions, and biometric identity as a form of being intrinsic to oneself [10].…”

“…According to [10], authentication of online accounts is something that many people understand as something you have, something you are, or something you know. This partly implies the use of passphrases, PINs, and passwords as knowledge; physical tokens as possessions, and biometric identity as a form of being intrinsic to oneself [10]. Other authentication techniques might include someone that you are conversant with and where you are.…”

“…Although there exist different kinds of authentication options, the use of passwords is continuing to dominate when it comes to online authentication. In this case, the main concern is that passwords are associated with a wide range of security vulnerabilities and aws with sheer amounts of generated passwords causing even greater risks [10]. Despite the continuing instances of passwords being compromised, many people are still using a single-factor authentication method that has greatly been associated with misalignment in human cognition, a vulnerability in the event of social engineering, and di culties when it comes to creating necessary policies.…”

“…Despite the continuing instances of passwords being compromised, many people are still using a single-factor authentication method that has greatly been associated with misalignment in human cognition, a vulnerability in the event of social engineering, and di culties when it comes to creating necessary policies. Even though a two-factor authentication is being adopted on a large scope, a simple examination of the bene ts and risks that are associated with them could call for further evaluation of their adoption [10].…”

“…To be in the sole position of assessing some of the reasons behind the limited adoption of two-factor authentication [10] decided to implement two-phase acceptability and usability assessment. The USB token that was subjected to tests, in this case, was the Yubico security key.…”