A Context-Driven Modelling Framework for Dynamic Authentication Decisions - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2022

A Context-Driven Modelling Framework for Dynamic Authentication Decisions

Anne Bumiller
  • Function : Author
  • PersonId : 1151120
Olivier Barais
Benoit Combemale
Nicolas Aillery
  • Function : Author
  • PersonId : 1151123
Gael Le Lan
  • Function : Author
  • PersonId : 1151124

Abstract

Nowadays, many mechanisms exist to perform authentication, such as text passwords and biometrics. However, reasoning about their relevance (e.g., the appropriateness for security and usability) regarding the contextual situation is challenging for authentication system designers. In this paper, we present a Context-driven Modelling Framework for dynamic Authentication decisions (COFRA), where the context information specifies the relevance of authentication mechanisms. COFRA is based on a precise metamodel that reveals framework abstractions and a set of constraints that specify their meaning. Therefore, it provides a language to determine the relevant authentication mechanisms (characterized by properties that ensure their appropriateness) in a given context. The framework supports the adaptive authentication system designers in the complex trade-off analysis between context information, risks and authentication mechanisms, according to usability, deployability, security, and privacy. We validate the proposed framework through case studies and extensive exchanges with authentication and modelling experts. We show that model instances describing real-world use cases and authentication approaches proposed in the literature can be instantiated validly according to our metamodel. This validation highlights the necessity, sufficiency, and soundness of our framework.
Fichier principal
Vignette du fichier
CameraReady_A_Context_Driven_Modelling_Framework_for_Dynamic_Authentication_Decisions.pdf (407.82 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03729080 , version 1 (20-07-2022)

Identifiers

  • HAL Id : hal-03729080 , version 1

Cite

Anne Bumiller, Olivier Barais, Stéphanie Challita, Benoit Combemale, Nicolas Aillery, et al.. A Context-Driven Modelling Framework for Dynamic Authentication Decisions. SEAA 2022 - Euromicro Conference Series on Software Engineering and Advanced Applications, Aug 2022, Maspalomas, Spain. pp.1-8. ⟨hal-03729080⟩
133 View
182 Download

Share

Gmail Mastodon Facebook X LinkedIn More