FIDO2 the Rescue? Platform vs. Roaming Authentication on Smartphones

Autor:	Würsching, Leon, Putz, Florentin, Haesler, Steffen, Hollick, Matthias
Rok vydání:	2023
Předmět:	Computer Science - Cryptography and Security Computer Science - Human-Computer Interaction Computer Science - Networking and Internet Architecture
Zdroj:	ACM CHI 2023
Druh dokumentu:	Working Paper
DOI:	10.1145/3544548.3580993
Popis:	Modern smartphones support FIDO2 passwordless authentication using either external security keys or internal biometric authentication, but it is unclear whether users appreciate and accept these new forms of web authentication for their own accounts. We present the first lab study (N=87) comparing platform and roaming authentication on smartphones, determining the practical strengths and weaknesses of FIDO2 as perceived by users in a mobile scenario. Most participants were willing to adopt passwordless authentication during our in-person user study, but closer analysis shows that participants prioritize usability, security, and availability differently depending on the account type. We identify remaining adoption barriers that prevent FIDO2 from succeeding password authentication, such as missing support for contemporary usage patterns, including account delegation and usage on multiple clients. Comment: 16 pages, 6 figures, the dataset is available at https://doi.org/10.5281/zenodo.7572697 and the source code is available at https://github.com/seemoo-lab/fido2-the-smartphone
Databáze:	arXiv
Externí odkaz:	http://arxiv.org/abs/2302.07777 Zobrazit plný text záznamu View this record from Arxiv