WIPP - Smart Authentication: Contextual Strategies for Dynamic User Verification

In this paper, we propose a framework to support continuous and adaptive multi-factor authentication. Our proposed solution is based on leveraging the users’ context to estimate the risk to the remote login and to support passive user authentication. We have developed a theoretical framework that supports dynamic, context-aware and adaptive selection of the authentication factors. Our Context-Aware and Adaptive Multi-Factor Authentication (CAA-MFA) framework increases the security of remote authentication by selecting k number of factors for the users’ authentication in a way that the selected factors are 1) unpredictable by the attackers, 2) satisfy security and privacy constraints, and 3) are suitable for dynamically changing environments. Our current work focuses on implementing a proof-of-concept prototype of the proposed framework.