A Novel Protocol Using Captive Portals for FIDO2 Network Authentication
Fuente:
arXiv
Enregistré dans:
| Auteurs principaux: | , , , |
|---|---|
| Format: | Preprint |
| Publié: |
2024
|
| Sujets: | |
| Accès en ligne: | |
| Tags: |
Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
|
| _version_ | 1866909182673813504 |
|---|---|
| author | Rivera-Dourado, Martiño Gestal, Marcos Pazos, Alejandro Vázquez-Naya, Jose |
| author_facet | Rivera-Dourado, Martiño Gestal, Marcos Pazos, Alejandro Vázquez-Naya, Jose |
| contents | FIDO2 authentication is starting to be applied in numerous web authentication services, aiming to replace passwords and their known vulnerabilities. However, this new authentication method has not been integrated yet with network authentication systems. In this paper, we introduce FIDO2CAP: FIDO2 Captive-portal Authentication Protocol. Our proposal describes a novel protocol for captive-portal network authentication using FIDO2 authenticators, as security keys and passkeys. For validating our proposal, we have developed a prototype of FIDO2CAP authentication in a mock scenario. Using this prototype, we performed an usability experiment with 15 real users. This work makes the first systematic approach for adapting network authentication to the new authentication paradigm relying on FIDO2 authentication. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2402_12864 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | A Novel Protocol Using Captive Portals for FIDO2 Network Authentication Rivera-Dourado, Martiño Gestal, Marcos Pazos, Alejandro Vázquez-Naya, Jose Cryptography and Security Networking and Internet Architecture Software Engineering FIDO2 authentication is starting to be applied in numerous web authentication services, aiming to replace passwords and their known vulnerabilities. However, this new authentication method has not been integrated yet with network authentication systems. In this paper, we introduce FIDO2CAP: FIDO2 Captive-portal Authentication Protocol. Our proposal describes a novel protocol for captive-portal network authentication using FIDO2 authenticators, as security keys and passkeys. For validating our proposal, we have developed a prototype of FIDO2CAP authentication in a mock scenario. Using this prototype, we performed an usability experiment with 15 real users. This work makes the first systematic approach for adapting network authentication to the new authentication paradigm relying on FIDO2 authentication. |
| title | A Novel Protocol Using Captive Portals for FIDO2 Network Authentication |
| topic | Cryptography and Security Networking and Internet Architecture Software Engineering |
| url | https://arxiv.org/abs/2402.12864 |