Hasan Syed Shabih Ul, Ghani Anwar, Daud Ali, Akbar Habib, Khan Muhammad Faizan
Department of Information Technology, The University of Haripur, Haripur 22620, Pakistan.
Department of Computer Science, International Islamic University Islamabad, Islamabad 44000, Pakistan.
Sensors (Basel). 2025 Jan 24;25(3):700. doi: 10.3390/s25030700.
Cybersecurity, complimenting authentication, has become the backbone of the Internet of Things. In the authentication process, the word authentication is of the utmost importance, as it is the door through which both Mr. Right Guy and Mr. Wrong Guy can pass. It is the key to opening the most important and secure accounts worldwide. When authentication is complete, surely there will be passwords. Passwords are a brain-confusing option for the user to choose when making an account during the registration/sign-up process. Providing reliable, effective, and privacy-preserving authentication for individuals in mobile networks is challenging due to user mobility, many attack vectors, and resource-constrained devices. This review paper explores the transformation and modern mobile authentication schemes, categorizing them into password, graphical, behavioral, keystroke, biometric, touchscreen, color, and gaze-based methodologies. It aims to examine the strengths and limitations focused on challenges like security and usability. Standard datasets and performance evaluation measures are also discussed. Finally, research gaps and future directions in this essential and emerging area of research are discussed.
网络安全与认证相辅相成,已成为物联网的支柱。在认证过程中,“认证”一词至关重要,因为它是正确的人和错误的人都能通过的门。它是打开全球最重要、最安全账户的钥匙。认证完成后,必然会有密码。在注册/报名过程中创建账户时,密码对于用户来说是一个令人头疼的选择。由于用户的移动性、众多攻击途径以及资源受限的设备,为移动网络中的个人提供可靠、有效且保护隐私的认证具有挑战性。本文综述探讨了变革性的现代移动认证方案,将其分为基于密码、图形、行为、按键、生物特征、触摸屏、颜色和凝视的方法。它旨在研究针对安全和可用性等挑战的优势和局限性。还讨论了标准数据集和性能评估措施。最后,讨论了这一重要且新兴研究领域的研究空白和未来方向。