A new risk-based authentication management model oriented on user's experience. Issue 73 (March 2018)

• Record Type: Journal Article
• Authors: Sepczuk, Mariusz; Kotulski, Zbigniew
• Is Part Of: Computers & security. Issue 73(2018)
• Page Start: 17
• Page End: 33
• Publication Date: 2018-03
• Subjects: Authentication -- Risk assessment -- Authentication systems management -- Contextual security -- Quality of experience -- Quality of protection; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2017.10.002
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: With the increasing role of numerous Internet services, more and more private data must be protected. One of the mechanisms which is used to ensure data security is user authentication. A reliable authentication mechanism is a foundation of security of a remote service but, on the other hand, it is also a source of user frustration because of fear of losing access in case of three failures. A remedy to this problem could be contextual secure authentication. Such a protocol should provide multi-level authentication mechanism which increases user satisfaction without decreasing a protection level. In this paper we propose a risk analysis procedure of a new authentication management model using contextual data and oriented on user experience. We describe an approach to risk assessment of the mechanism, which supports a process of choosing the proper multi-step authentication procedure. On this basis, it is possible to provide a security solution which keeps balance between user satisfaction (related to QoE) and the obtained Level of Security (related to QoP).