Host Oriented Factor Normalizing Authentication Resource: More Secure Authentication for Legacy Systems Whenever one accesses a computer system there are three essential security issues involved: identification, authentication and authorization. The identification process enables recognition of an entity, which may be either a human, a machine, or another asset xe2x80x93 e.g. software program. Two complementary mechanisms are used for determining who can access those systems: authentication and authorization. To address the authentication process, various solutions have been proposed in the literature, from a simple password to newer technologies based on biometrics or RFID (Radio Frequency Identification). This paper presents a novel scalable multifactor authentication method, applicable to computer systems with no need of any hardwaresoftware changes.

User Authentication on Mobile Devices: Approaches, Threats and Trends Abstract   Mobile devices have brought a great convenience to us these years, which allow the users to enjoy the anytime and anywhere various applications such as the online shopping, Internet banking, navigation and mobile media. While the users enjoy the convenience and flexibility of the xe2x80x9dGo Mobilexe2x80x9d trend, their sensitive private information (e.g., name and credit card number) on the mobile devices could be disclosed. An adversary could access the sensitive private information stored on the mobile device by unlocking the mobile devices. Moreover, the userxe2x80x99s mobile services and applications are all exposed to security threats. For example, the adversary could utilize the userxe2x80x99s mobile device to conduct nonpermitted actions (e.g., making online transactions and installing malwares). The authentication on mobile devices plays a significant role to protect the userxe2x80x99s sensitive information on mobile devices and prevent any nonpermitted access to the mobile devices. This paper surveys the existing authentication methods on mobile devices. In particular, based on the basic authentication metrics (i.e., knowledge, ownership and biometrics) used in existing mobile authentication methods, we categorize them into four categories, including the knowledgebased authentication (e.g., passwords and lock patterns), physiological biometricbased authentication (e.g., fingerprint and iris), behavioral biometricsbased authentication (e.g., gait and hand gesture), and twomultifactor authentication. We compare the usability and security level of the existing authentication approaches among these categories. Moreover, we review the existing attacks to these authentication approaches to reveal their vulnerabilities. The paper points out that the trend of the authentication on mobile devices would be the multifactor authentication, which determines the userxe2x80x99s identity using the integration (not the simple combination) of more than one authentication metrics. For example, the userxe2x80x99s behavior biometrics (e.g., keystroke dynamics) could be extracted simultaneously when heshe inputs the knowledgebased secrets (e.g., PIN), which can provide the enhanced authentication as well as sparing the userxe2x80x99s trouble to conduct multiple inputs for different authentication metrics.