Fishbone model and universal authentication framework for evaluation of multifactor authentication in mobile environment. Issue 85 (August 2019)

• Record Type: Journal Article
• Authors: Korać, Dragan; Simić, Dejan
• Is Part Of: Computers & security. Issue 85(2019)
• Page Start: 313
• Page End: 332
• Publication Date: 2019-08
• Subjects: Fishbone model -- Universal authentication framework (UAF) -- Multifactor authentication (MFA) -- SUAPCPC factors -- Fuzzy Expert System (FES); Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2019.05.011
• Languages: English
• ISSNs: 0167-4048

Abstract

Highlights: Fishbone model provides UAF for quantifying MFA methods in mobile environment. This paper gives the comparison of contemporary user mobile authentication based on SUAPCPC factors. For development of the fishbone model, fuzzy methodology is used in form of a fuzzy expert system (FES) tool. Crisp results show that fishbone model is applicable and a very efficient in practice. Abstract: The trend of rapid evolutionary development of mobile technologies and the existence of different user's priorities are creating new challenges with regard to selection of multifactor authentication (MFA) solutions. This becomes even more challenging by creating a universal authentication framework (UAF). In order to cope with these challenges, this paper has proposed a Fishbone model and developed in form of the UAF which is based on a larger number of linguistic variables and a wider set of user's priorities such as security, usability, accessibility, pricing, complexity, privacy and convenience (SUAPCPC). In comparison to all other papers available in the literature, the Fishbone model provides numerical evaluation of MFA with the possibility of changing weighted criteria for the selected user priorities. In addition, the contributions of this model are twofold. For user's, to enable easier choice of MFA solution, for developers, to identify spots where a method or solution could be improved. For development of the Fishbone model, fuzzy methodology is used in form of a Fuzzy Expert System (FES) tool. Also, the block diagram and the basic modules of the Fishbone model architecture are given. The results of implementation of the Fishbone model in form of the UAF have showed that this model is applicable and very efficient in practice. Finally, the Fishbone model gives an ideal template in UAF at which user's priorities satisfy the best individual users' solutions. The realization of this template presents challenge for all future developers of MFA solutions.