Abstract:As the most prevailing two-factor authentication mechanism, smart-card-based password authentication has been a subject of intensive research in the past two decades, and hundreds of this type of schemes have wave upon wave been proposed. In most of these studies, there is no comprehensive and systematical metric available for schemes to be assessed objectively, and the authors present new schemes with assertions of the superior aspects over previous ones, while overlooking dimensions on which their schemes fare poorly. Unsurprisingly, most of them are far from satisfactory—either are found short of important security goals or lack of critical properties, especially being stuck with the security-usability tension. To overcome this issue, in this work we first explicitly define a security model that can accurately capture the practical capabilities of an adversary and then suggest a broad set of twelve properties framed as a systematic methodology for comparative evaluation, allowing schemes to be rated across a common spectrum. As our main contribution, a new scheme is advanced to resolve the various issues arising from user corruption and server compromise, and it is formally proved secure under the harshest adversary model so far. In particular, by integrating “honeywords”, traditionally the purview of system security, with a “fuzzy-verifier”, our scheme hits “two birds”: it not only eliminates the long-standing security-usability conflict that is considered intractable in the literature, but also achieves security guarantees beyond the conventional optimal security bound.

Design and Implementation of Multi-Role Logon Authentication Based on Tokencard System

Solution to VPN and Authentication System

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Researche on Design of Biometric Authentication System

Fingerprint-based Authentication in Networking Environment

Demo: WISP-based Access Control Combining Electronic and Mechanical Authentication

Dynamic Authentication with Sensory Information for the Access Control Systems.

Design and Implementation of Unified Access Control System Based on LDAP

Design of campus comprehensive access management platform

MultiAuth: Enable Multi-User Authentication with Single Commodity WiFi Device

A Novel User Authentication Scheme Using Smart Cards.

Toward Multi-User Authentication Using WiFi Signals

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Design and Analysis of a Secure Three Factor User Authentication Scheme Using Biometric and Smart Card

Design and Realization of Distributed SSO System Supporting Multi-mode Application

Authentication Scheme of Remote Users by Using Multimodal Biometric and Smart Cards

Two Birds with One Stone: Two-Factor Authentication with Security Beyond Conventional Bound.

AN EFFICIENT AND SECURE DYNAMIC PASSWORD AUTHENTICATION SCHEME

Systematic Solutions to Login and Authentication Security Problems: A Dual-Password Login-Authentication Mechanism

Optimization and Practice of Unified User Authentication System at Peking University

Smart Home Multi-Factor Authentication Using Face Recognition and One-Time Password on Smartphone