Abstract:<p>Mobile devices have brought a great convenience to us these years, which allow the users to enjoy the anytime and anywhere various applications such as the online shopping, Internet banking, navigation and mobile media. While the users enjoy the convenience and flexibility of the "Go Mobile" trend, their sensitive private information (e.g., name and credit card number) on the mobile devices could be disclosed. An adversary could access the sensitive private information stored on the mobile device by unlocking the mobile devices. Moreover, the user's mobile services and applications are all exposed to security threats. For example, the adversary could utilize the user's mobile device to conduct non-permitted actions (e.g., making online transactions and installing malwares). The authentication on mobile devices plays a significant role to protect the user's sensitive information on mobile devices and prevent any non-permitted access to the mobile devices. This paper surveys the existing authentication methods on mobile devices. In particular, based on the basic authentication metrics (i.e., knowledge, ownership and biometrics) used in existing mobile authentication methods, we categorize them into four categories, including the knowledge-based authentication (e.g., passwords and lock patterns), physiological biometric-based authentication (e.g., fingerprint and iris), behavioral biometrics-based authentication (e.g., gait and hand gesture), and two/multi-factor authentication. We compare the usability and security level of the existing authentication approaches among these categories. Moreover, we review the existing attacks to these authentication approaches to reveal their vulnerabilities. The paper points out that the trend of the authentication on mobile devices would be the multi-factor authentication, which determines the user's identity using the integration (not the simple combination) of more than one authentication metrics. For example, the user's behavior biometrics (e.g., keystroke dynamics) could be extracted simultaneously when he/she inputs the knowledge-based secrets (e.g., PIN), which can provide the enhanced authentication as well as sparing the user's trouble to conduct multiple inputs for different authentication metrics.</p>

End-point Security Authentication Technology and Its Development

Fingerprint-based Authentication in Networking Environment

Solution to VPN and Authentication System

Researche on Design of Biometric Authentication System

Demo: WISP-based Access Control Combining Electronic and Mechanical Authentication

Dynamic Authentication with Sensory Information for the Access Control Systems.

The Development of Information Security Technology

Advances in Password Security

Research on the Network Security and Identity Authentication Technology

Security authentication mechanism overview of Ad hoc network nodes

User authentication on mobile devices: Approaches, threats and trends

A Mutual Authentication and Privacy Mechanism for WLAN Security.

A Study of Security and Applicability on Building Collaborative Design Platform in Wide Area Network

Research on Host-Network Security and its Key Technologies

The Research and Development of Access Control Technology

Computer Network Security and Technology Research

Computer Network Security Technology Research

Security Authentication of 3G-WLAN Interworking

Security of E-Bank Identity Authentication System Based on Hardware

Research and Implementation of One-Time Password Authentication in Computer Networks

Study on the Model and Algorithm of Internet Trusted Identity Authentication System.