Staff View: A frictionless and secure user authentication in web-based premium applications

A frictionless and secure user authentication in web-based premium applications

By and large, authentication systems employed for web-based applications primarily utilize conventional username and password-based schemes, which can be compromised easily. Currently, there is an evolution of various complex user authentication schemes based on the sophisticated encryption methodol...

Full description

Saved in:

Bibliographic Details
Main Authors:	Olanrewaju, Rashidah F., Khan, Burhan Ul Islam, Morshidi, Malik Arman, Anwar, Farhat, Mat Kiah, Miss Laiha
Format:	Article
Published:	Institute of Electrical and Electronics Engineers 2021
Subjects:	QA75 Electronic computers. Computer science TA Engineering (General). Civil engineering (General)
Online Access:	http://eprints.um.edu.my/26846/ https://doi.org/10.1109/ACCESS.2021.3110310
Tags:	Add Tag No Tags, Be the first to tag this record!

id	my.um.eprints.26846
record_format	eprints
spelling	my.um.eprints.268462022-02-23T04:48:31Z http://eprints.um.edu.my/26846/ A frictionless and secure user authentication in web-based premium applications Olanrewaju, Rashidah F. Khan, Burhan Ul Islam Morshidi, Malik Arman Anwar, Farhat Mat Kiah, Miss Laiha QA75 Electronic computers. Computer science TA Engineering (General). Civil engineering (General) By and large, authentication systems employed for web-based applications primarily utilize conventional username and password-based schemes, which can be compromised easily. Currently, there is an evolution of various complex user authentication schemes based on the sophisticated encryption methodology. However, many of these schemes suffer from either low impact full consequences or offer security at higher resource dependence. Furthermore, most of these schemes don't consider dynamic threat and attack strategies when the clients are exposed to unidentified attack environments. Hence, this paper proposes a secure user authentication mechanism for web applications with a frictionless experience. An automated authentication scheme is designed based on user behavior login events. The uniqueness of user identity is validated in the proposed system at the login interface, followed by implying an appropriate user authentication process. The authentication process is executed under four different login mechanisms, which depend on the profiler and the authenticator function. The profiler uses user behavioral data, including login session time, device location, browser, and details of accessed web services. The system processes these data and generates a user profile via a profiler using the authenticator function. The authenticator provides a login mechanism to the user to perform the authentication process. After successful login attempts, the proposed system updates database for future evaluation in the authentication process. The study outcome shows that the proposed system excels to other authentication schemes for an existing web-based application. The proposed method, when comparatively examined, is found to offer approximately a 10% reduction in delay, 7% faster response time, and 11% minimized memory usage compared with existing authentication schemes for premium web-based applications. Institute of Electrical and Electronics Engineers 2021 Article PeerReviewed Olanrewaju, Rashidah F. and Khan, Burhan Ul Islam and Morshidi, Malik Arman and Anwar, Farhat and Mat Kiah, Miss Laiha (2021) A frictionless and secure user authentication in web-based premium applications. IEEE Access, 9. pp. 129240-129255. ISSN 2169-3536, https://doi.org/10.1109/ACCESS.2021.3110310
institution	Universiti Malaya
building	UM Library
collection	Institutional Repository
continent	Asia
country	Malaysia
content_provider	Universiti Malaya
content_source	UM Research Repository
url_provider	http://eprints.um.edu.my/
topic	QA75 Electronic computers. Computer science TA Engineering (General). Civil engineering (General)
spellingShingle	QA75 Electronic computers. Computer science TA Engineering (General). Civil engineering (General) Olanrewaju, Rashidah F. Khan, Burhan Ul Islam Morshidi, Malik Arman Anwar, Farhat Mat Kiah, Miss Laiha A frictionless and secure user authentication in web-based premium applications
description	By and large, authentication systems employed for web-based applications primarily utilize conventional username and password-based schemes, which can be compromised easily. Currently, there is an evolution of various complex user authentication schemes based on the sophisticated encryption methodology. However, many of these schemes suffer from either low impact full consequences or offer security at higher resource dependence. Furthermore, most of these schemes don't consider dynamic threat and attack strategies when the clients are exposed to unidentified attack environments. Hence, this paper proposes a secure user authentication mechanism for web applications with a frictionless experience. An automated authentication scheme is designed based on user behavior login events. The uniqueness of user identity is validated in the proposed system at the login interface, followed by implying an appropriate user authentication process. The authentication process is executed under four different login mechanisms, which depend on the profiler and the authenticator function. The profiler uses user behavioral data, including login session time, device location, browser, and details of accessed web services. The system processes these data and generates a user profile via a profiler using the authenticator function. The authenticator provides a login mechanism to the user to perform the authentication process. After successful login attempts, the proposed system updates database for future evaluation in the authentication process. The study outcome shows that the proposed system excels to other authentication schemes for an existing web-based application. The proposed method, when comparatively examined, is found to offer approximately a 10% reduction in delay, 7% faster response time, and 11% minimized memory usage compared with existing authentication schemes for premium web-based applications.
format	Article
author	Olanrewaju, Rashidah F. Khan, Burhan Ul Islam Morshidi, Malik Arman Anwar, Farhat Mat Kiah, Miss Laiha
author_facet	Olanrewaju, Rashidah F. Khan, Burhan Ul Islam Morshidi, Malik Arman Anwar, Farhat Mat Kiah, Miss Laiha
author_sort	Olanrewaju, Rashidah F.
title	A frictionless and secure user authentication in web-based premium applications
title_short	A frictionless and secure user authentication in web-based premium applications
title_full	A frictionless and secure user authentication in web-based premium applications
title_fullStr	A frictionless and secure user authentication in web-based premium applications
title_full_unstemmed	A frictionless and secure user authentication in web-based premium applications
title_sort	frictionless and secure user authentication in web-based premium applications
publisher	Institute of Electrical and Electronics Engineers
publishDate	2021
url	http://eprints.um.edu.my/26846/ https://doi.org/10.1109/ACCESS.2021.3110310
_version_	1735409466142097408
score	13.211869

A frictionless and secure user authentication in web-based premium applications

Similar Items