This paper examines the impact of Authenticator Assurance Levels (AAL) on user efficiency in authentication processes, aiming to balance security and usability. The central research question investigates how AAL levels influence user efficiency, particularly concerning the number of required “keys”. Using S-BPM notation, the study offers insights into the authentication landscape through a subject- and process-oriented comparison. Considering how subjects handle authenticators, it’s evident that an authenticator app may be preferable to a hardware key in certain contexts, as users are typically vigilant about their smartphones. The analysis concludes that higher AAL levels, like AAL3, offer a more streamlined authentication experience with fewer required “keys”, aligning with users’ daily interaction patterns and enhancing overall usability. Integrating these findings into cybersecurity practices can enhance multi-factor authentication methods, fostering a more secure and user-centric environment.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Subject- and Process-Oriented Comparison of Multi-factor Authentication Methods

  • Alexander Lawall,
  • Petra Beenken

摘要

This paper examines the impact of Authenticator Assurance Levels (AAL) on user efficiency in authentication processes, aiming to balance security and usability. The central research question investigates how AAL levels influence user efficiency, particularly concerning the number of required “keys”. Using S-BPM notation, the study offers insights into the authentication landscape through a subject- and process-oriented comparison. Considering how subjects handle authenticators, it’s evident that an authenticator app may be preferable to a hardware key in certain contexts, as users are typically vigilant about their smartphones. The analysis concludes that higher AAL levels, like AAL3, offer a more streamlined authentication experience with fewer required “keys”, aligning with users’ daily interaction patterns and enhancing overall usability. Integrating these findings into cybersecurity practices can enhance multi-factor authentication methods, fostering a more secure and user-centric environment.