Authentication schemes for Smart Mobile Devices: Threat Models, Countermeasures, and Open Research Issues

Date

2019

Advisors

Journal Title

Journal ISSN

ISSN

Volume Title

Publisher

Springer

Type

Article

Peer reviewed

Yes

Abstract

This paper presents a comprehensive investigation of authentication schemes for smart mobile devices. We start by providing an overview of existing survey articles published in the recent years that deal with security for mobile devices. Then, we give a classification of threat models in smart mobile devices in five categories, including, identity-based attacks, eavesdropping-based attacks, combined eavesdropping and identity-based attacks, manipulation-based attacks, and service-based attacks. This is followed by a description of multiple existing threat models. We also provide a classification of countermeasures into four types of categories, including, cryptographic functions, personal identification, classification algorithms, and channel characteristics. According to the characteristics of the countermeasure along with the authentication model iteself, we categorize the authentication schemes for smart mobile devices in four categories, namely, 1) biometric-based authentication schemes, 2) channel-based authentication schemes, 3) factors-based authentication schemes, and 4) ID-based authentication schemes. In addition, we provide a taxonomy and comparison of authentication schemes for smart mobile devices in form of tables. Finally, we identify open challenges and future research directions.

Description

The file attached to this record is the author's final peer reviewed version. The Publisher's final version can be found by following the DOI link.

Keywords

Authentication, Smart Mobile Devices, Biometrics

Citation

Ferrag, M. A., Maglaras, L., Derhab, A. and Janicke, H. (2019) Authentication schemes for Smart Mobile Devices: Threat Models, Countermeasures, and Open Research Issues. Telecommunication Systems,

Rights

Research Institute

Cyber Technology Institute (CTI)