Remote WebAuthn: FIDO2 Authentication for Less Accessible Devices

Paul Wagner, Kris Heid, Jens Heider

2021

Abstract

Nowadays, passwords are the prevalent authentication mechanism, even though it is proven to offer insufficient protection against cyber crime. Thus, FIDO2 was released with a more secure authentication mechanism. FIDO2 enables authentification with cryptographic hardware, such as USB sticks, NFC cards or in the smartphone integrated chips. A device with FIDO2 support is required to implement the whole FIDO2 stack and offer the required interfaces for the security hardware. However, many systems like for example Smart TVs can not make use of FIDO2 due to the lack of HW interfaces or the usage of outdated software. To overcome this, we present Remote WebAuthn, which enables secure authentification on such restricted devices through a remote authentication from a secondary, FIDO2 compatible device, such as a smartphone. We evaluate our approach to have better usability compared to FIDO2 while maintaining most security advantages.

Paper Citation

in Harvard Style

Wagner P., Heid K. and Heider J. (2021). Remote WebAuthn: FIDO2 Authentication for Less Accessible Devices.In Proceedings of the 7th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-491-6, pages 368-375. DOI: 10.5220/0010192703680375

in Bibtex Style

@conference{icissp21,
author={Paul Wagner and Kris Heid and Jens Heider},
title={Remote WebAuthn: FIDO2 Authentication for Less Accessible Devices},
booktitle={Proceedings of the 7th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2021},
pages={368-375},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0010192703680375},
isbn={978-989-758-491-6},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 7th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - Remote WebAuthn: FIDO2 Authentication for Less Accessible Devices
SN - 978-989-758-491-6
AU - Wagner P.
AU - Heid K.
AU - Heider J.
PY - 2021
SP - 368
EP - 375
DO - 10.5220/0010192703680375