Comprehensive analysis of continuous authentication for mobile devices

Dagar, Aishani; Singh, Karan; Khan, Tayyab

doi:10.47974/JDMSC-1840

Open Access Research Article

Comprehensive analysis of continuous authentication for mobile devices

^*Aishani DagarCorresponding authoraishanidagar26@gmail.comModern SchoolBarakhamba RoadNew Delhi, IndiaView full profile → , Karan Singhtayyabkhan.cse2012@gmail.comSchool of Computer & Systems SciencesJawaharlal Nehru UniversityNew Delhi, IndiaView full profile → , Tayyab Khankarancs12@gmail.comSchool of Computer & Systems SciencesJawaharlal Nehru UniversityNew Delhi, IndiaView full profile →

* Corresponding author · click or hover a name for details

pp. 2007–2024Vol. 26Issue 7October 2023DOI: 10.47974/JDMSC-1840 Crossmark XML

Received:: 03 Sep 2023
Published Online:: 15 Dec 2023
Article type:: Research Article
Language:: EN
Article no.:: JDMSC-1840
Pages:: 2007–2024

Abstract

Continuous mobile authentication is an imperative aspect of ensuring the security and privacy of data in the contemporary mobile computing landscape. With the proliferation of mobile devices and the increasing dependency on mobile applications, traditional authentication methods are steadily becoming inadequate to protect sensitive information from unauthorized access. Continuous authentication techniques aim to provide ongoing and seamless verification of user identities, enhancing security while minimizing user inconvenience. This survey paper presents a comprehensive analysis of traditional authentication methods, highlighting key techniques, their integration in mobile systems, applications, and limitations. Then, we elaborate on the various techniques employed in continuous authentication. By examining the strengths and weaknesses of different approaches, this survey aims to provide researchers, practitioners, and developers with a comprehensive understanding of continuous mobile authentication, enabling them to make informed decisions when implementing authentication mechanisms in mobile applications.

Keywords

Continuous mobile authentication Security Data protection Mobile devices Seamless verification Authentication mechanism Survey

Subject Classifications

68P27

References

[1] Laricchia, F., Number of smartphone users by leading countries in 2022. Statista (2023). https://www.statista.com/statistics/330695/number-of-smartphone-users-worldwide/.
[2] Amin, R., Gaber, T., ElTaweel, G., Hassanien, A.E., Biometric and Traditional Mobile Authentication Techniques: Overviews and Open Issues. In: Hassanien, A., Kim, TH., Kacprzyk, J., Awad, A. (eds) Bio-inspiring Cyber Security and Cloud Services: Trends and Innovations. Intelligent Systems Reference Library, vol 70. Springer, Berlin, Heidelberg (2014). https://doi.org/10.1007/978-3-662-43616-5_16.
[3] Ceci, L., Number of mobile cyber attacks against users worldwide from January 2020 to December 2022. Statista (2023). https://www.statista.com/statistics/1305965/mobile-users-cyber-attacks/.
[4] Ambimat Electronics. SMS-based OTP Authentication and Its Disadvantages. Ambimat Electronics (2021, June 1). https://ambimat.com/sms-based-otp-authentication-and-its-disadvantages/.
[5] Chen Wang, Yan Wang, Yingying Chen, Hongbo Liu, Jian Liu., User authentication on mobile devices: Approaches, threats and trends. Computer Networks, 170 (2020). https://doi.org/10.1016/j.comnet.2020.107118.
[6] Er. Aman Kumar, E. N. B., A Graphical Password Based Authentication Based System For Mobile Devices. International Journal of Computer Science and Mobile Computing, 3(4), 744–754 (2014). https://www.ijcsmc.com/docs/papers/April2014/V3I4201499a50.pdf.
[7] Bandakkanavar, R., Graphical Password Authentication. KrazyTech (2017, August 19). https://krazytech.com/technical-papers/graphical-password-authentication.
[8] Towseef Akram Vakeel Ahmad Israrul Haq Monisa Nazir. Graphical Password Authentication. International Journal of Computer Science and Mobile Computing, 6(6), 394–400 (6, June 2017).
[9] What’s the Difference Between OTP, TOTP and HOTP? (n.d.). Onelogin Logo. https://www.onelogin.com/learn/otp-totp-hotp#:~:text=There%20are%20two%20types%20of%20OTP%3A%20HOTP%20and%20TOTP.
[10] Syed Zulkarnain Syed Idrus, Estelle Cherrier, Christophe Rosenberger, Jean-Jacques Schwartzmann. A Review on Authentication Methods. Australian Journal of Basic and Applied Sciences, 7 (5), pp. 95-107 (2013). hal-00912435.
[11] One-time password (OTP) – more security online. (2020, January 10). IONOS. https://www.ionos.com/digitalguide/server/security/what-is-a-one-time-password-otp/.
[12] HUSEYNOV, Emin, SEIGNEUR, Jean-Marc. WifiOTP: Pervasive Two-Factor Authentication Using Wi-Fi SSID Broadcasts. In: ITU / IEEE. Kaleidoscope International Conference. 2015.
[13] Goodner, S., What Are Finger Scanners and How Do They Work? Lifewire (2021, August 29). https://www.lifewire.com/understanding-finger-scanners-4150464.
[14] What is Iris Recognition and how does it work? NEC (2022, June 15). https://www.nec.co.nz/market-leadership/publications-media/what-is-iris-recognition-and-how-does-it-work/.
[15] M. O. Derawi, C. Nickel, P. Bours and C. Busch, “Unobtrusive User-Authentication on Mobile Phones Using Biometric Gait Recognition,” 2010 Sixth International Conference on Intelligent Information Hiding and Multimedia Signal Processing, Darmstadt, Germany, pp. 306-311 (2010), doi: 10.1109/IIHMSP.2010.83.
[16] Abuhamad, M., Abusnaina, A., Nyang, D., & Mohaisen, D., Sensor-based Continuous Authentication of Smartphones’ Users Using Behavioral Biometrics: A Contemporary Survey (2020). ArXiv. /abs/2001.08578.
[17] Zareen, F.J. and Jabin, S., Authentic mobile-biometric signature verification system. IET Biom., 5: 13-19 (2016). https://doi.org/10.1049/iet-bmt.2015.0017.
[18] Shankar, V., & Singh, K., An improved user authentication scheme on smartphone using dominating attribute of touch data. Journal of Discrete Mathematical Sciences and Cryptography, 22(8), 1549-1561 (2019).
[19] Shekhawat, K., & Bhatt, D. P., A novel approach for user authentication using keystroke dynamics. Journal of Discrete Mathematical Sciences and Cryptography, 25(7), 2015-2027 (2022).
[20] Ara, A., Sharma, A., & Yadav, D., An efficient privacy-preserving user authentication scheme using image processing and blockchain technologies. Journal of Discrete Mathematical Sciences and Cryptography, 25(4), 1137-1155 (2022).
[21] Dinker, A. G., Sharma, V., Mansi, & Singh, N., Multilevel authentication scheme for security critical networks. Journal of Information and Optimization Sciences, 39(1), 357-367 (2018).
[22] Joshi, A., & Mohapatra, A. K., A novel lightweight authentication protocol for body area networks based on elliptic-curve cryptography. Journal of Information and Optimization Sciences, 41(7), 1645-1672 (2020).
[23] Kumar, A., Singh, K., & Khan, T., L-RTAM: Logarithm based reliable trust assessment model for WBSNs. Journal of Discrete Mathematical Sciences and Cryptography, 24(6), 1701-1716 (2021).

Views: 360Downloads: 122Citations: 2