Modern Authentication Schemes in Smartphones and IoT Devices

Modern Authentication Schemes in Smartphones and IoT Devices: An Empirical Survey

Ahvanooey, Milad Taleby (Nanjing University)
Zhu, Mark Xuefang (Nanjing University)
Li, Qianmu (Nanjing University of Science and Technology; Wuyi University)
Mazurczyk, Wojciech (Warsaw University of Technology)
Choo, Kim Kwang Raymond (The University of Texas at San Antonio)
Gupta, Brij B. (National Institute of Technology Kurukshetra; Asia University)
Conti, M. (TU Delft Cyber Security; Università degli Studi di Padova)

2022

User authentication remains a challenging issue, despite the existence of a large number of proposed solutions, such as traditional text-based, graphical-based, biometrics-based, Web-based, and hardware-based schemes. For example, some of these schemes are not suitable for deployment in an Internet of Things (IoT) setting, partly due to the hardware and/or software constraints of IoT devices. The increasing popularity and pervasiveness of IoT equipment in a broad range of settings reinforces the importance of ensuring the security and privacy of IoT devices. Therefore, in this article, we conduct a comprehensive literature review and an empirical study to gain an in-depth understanding of the different authentication schemes as well as their vulnerabilities and deficits against various types of cyberattacks when applied in IoT-based systems. Based on the identified limitations, we recommend several mitigation strategies and discuss the practical implications of our findings.

Authentication schemes
Password security
, In- ternet of Things (IoT)
Cracking attacks
Biometrics
Graphical passwords

http://resolver.tudelft.nl/uuid:17db65c2-1045-432f-9179-90e0b7322305

https://doi.org/10.1109/JIOT.2021.3138073

2022-06-02

2327-4662

IEEE Internet of Things Journal, 9 (10), 7639-7663

Green Open Access added to TU Delft Institutional Repository ‘You share, we take care!’ – Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.

Institutional Repository

journal article

© 2022 Milad Taleby Ahvanooey, Mark Xuefang Zhu, Qianmu Li, Wojciech Mazurczyk, Kim Kwang Raymond Choo, Brij B. Gupta, M. Conti