{"id":"https://openalex.org/W3161894933","doi":"https://doi.org/10.1109/tifs.2021.3081263","title":"Practical Threshold Multi-Factor Authentication","display_name":"Practical Threshold Multi-Factor Authentication","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3161894933","doi":"https://doi.org/10.1109/tifs.2021.3081263","mag":"3161894933"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2021.3081263","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2021.3081263","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://resolver.tudelft.nl/uuid:fd1d3321-6a8f-442e-9d62-e83ab0369e61","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100440865","display_name":"Wenting Li","orcid":"https://orcid.org/0000-0002-2613-8257"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenting Li","raw_affiliation_strings":["School of Software & Microelectronics, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-2613-8257","affiliations":[{"raw_affiliation_string":"School of Software & Microelectronics, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073639015","display_name":"Haibo Cheng","orcid":"https://orcid.org/0000-0001-6677-463X"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haibo Cheng","raw_affiliation_strings":["School of Electronics Engineering and Computer Science, Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electronics Engineering and Computer Science, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100338689","display_name":"Ping Wang","orcid":"https://orcid.org/0000-0002-8854-2079"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]},{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ping Wang","raw_affiliation_strings":["School of Software & Microelectronics, Peking University, Beijing, China","Key Laboratory of High Confidence Software Technologies, Ministry of Education, Peking University, Beijing, China","National Engineering Research Center for Software Engineering, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-8854-2079","affiliations":[{"raw_affiliation_string":"School of Software & Microelectronics, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"Key Laboratory of High Confidence Software Technologies, Ministry of Education, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"National Engineering Research Center for Software Engineering, Beijing, China","institution_ids":["https://openalex.org/I4210156423"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001485404","display_name":"Kaitai Liang","orcid":"https://orcid.org/0000-0003-0262-7678"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Kaitai Liang","raw_affiliation_strings":["Department of Intelligent Systems, Delft University of Technology, Delft, The Netherlands"],"raw_orcid":"https://orcid.org/0000-0003-0262-7678","affiliations":[{"raw_affiliation_string":"Department of Intelligent Systems, Delft University of Technology, Delft, The Netherlands","institution_ids":["https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.4942,"has_fulltext":true,"cited_by_count":33,"citation_normalized_percentile":{"value":0.92706735,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":"16","issue":null,"first_page":"3573","last_page":"3588"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8310683369636536},{"id":"https://openalex.org/keywords/login","display_name":"Login","score":0.6860197186470032},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6651629209518433},{"id":"https://openalex.org/keywords/challenge-handshake-authentication-protocol","display_name":"Challenge-Handshake Authentication Protocol","score":0.5627120733261108},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5552991032600403},{"id":"https://openalex.org/keywords/multi-factor-authentication","display_name":"Multi-factor authentication","score":0.5286602973937988},{"id":"https://openalex.org/keywords/authentication-protocol","display_name":"Authentication protocol","score":0.5066655278205872},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.5011553764343262},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.46835556626319885},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.43649280071258545},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3846861720085144},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09181064367294312},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.0705367922782898}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8310683369636536},{"id":"https://openalex.org/C113324615","wikidata":"https://www.wikidata.org/wiki/Q472302","display_name":"Login","level":2,"score":0.6860197186470032},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6651629209518433},{"id":"https://openalex.org/C207828512","wikidata":"https://www.wikidata.org/wiki/Q1060131","display_name":"Challenge-Handshake Authentication Protocol","level":4,"score":0.5627120733261108},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5552991032600403},{"id":"https://openalex.org/C194699767","wikidata":"https://www.wikidata.org/wiki/Q7878662","display_name":"Multi-factor authentication","level":4,"score":0.5286602973937988},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.5066655278205872},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.5011553764343262},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.46835556626319885},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.43649280071258545},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3846861720085144},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09181064367294312},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0705367922782898},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tifs.2021.3081263","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2021.3081263","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:tudelft.nl:uuid:fd1d3321-6a8f-442e-9d62-e83ab0369e61","is_oa":true,"landing_page_url":"http://resolver.tudelft.nl/uuid:fd1d3321-6a8f-442e-9d62-e83ab0369e61","pdf_url":"http://resolver.tudelft.nl/uuid:fd1d3321-6a8f-442e-9d62-e83ab0369e61","source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"journal article"},{"id":"pmh:oai:zenodo.org:6038478","is_oa":true,"landing_page_url":"https://zenodo.org/record/6038478","pdf_url":"https://zenodo.org/record/6038478","source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Information Forensics and Security Volume 16 3573 - 3588","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:tudelft.nl:uuid:fd1d3321-6a8f-442e-9d62-e83ab0369e61","is_oa":true,"landing_page_url":"http://resolver.tudelft.nl/uuid:fd1d3321-6a8f-442e-9d62-e83ab0369e61","pdf_url":"http://resolver.tudelft.nl/uuid:fd1d3321-6a8f-442e-9d62-e83ab0369e61","source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"journal article"},"sustainable_development_goals":[{"score":0.7699999809265137,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G1758561082","display_name":"Future Proofing of ICT Trust Chains: Sustainable Operational Assurance and Verification Remote Guards for Systems-of-Systems Security and Privacy","funder_award_id":"952697","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G6107093909","display_name":null,"funder_award_id":"2020YFB1805400","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7463024246","display_name":null,"funder_award_id":"2020YFB1805400","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G7842005466","display_name":null,"funder_award_id":"Horizon 2020","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G866882489","display_name":"\u57fa\u4e8e\u871c\u5b57\u7684\u6297\u6cc4\u9732\u8eab\u4efd\u8ba4\u8bc1\u534f\u8bae\u7814\u7a76","funder_award_id":"62072010","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3161894933.pdf","grobid_xml":"https://content.openalex.org/works/W3161894933.grobid-xml"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W1499934958","https://openalex.org/W1526070463","https://openalex.org/W1542059364","https://openalex.org/W1561441787","https://openalex.org/W1895302964","https://openalex.org/W1990556702","https://openalex.org/W2030112111","https://openalex.org/W2096473396","https://openalex.org/W2097407854","https://openalex.org/W2117455301","https://openalex.org/W2124926080","https://openalex.org/W2157604883","https://openalex.org/W2165956633","https://openalex.org/W2351133878","https://openalex.org/W2570008916","https://openalex.org/W2610891049","https://openalex.org/W2612085556","https://openalex.org/W2621151780","https://openalex.org/W2766472919","https://openalex.org/W2789461976","https://openalex.org/W2795336163","https://openalex.org/W2801912887","https://openalex.org/W2883088980","https://openalex.org/W2891698757","https://openalex.org/W2905628336","https://openalex.org/W2931153881","https://openalex.org/W2968481436","https://openalex.org/W2973245241","https://openalex.org/W2977115923","https://openalex.org/W2982664727","https://openalex.org/W2990127528","https://openalex.org/W3003637591","https://openalex.org/W3014017565","https://openalex.org/W3048121906","https://openalex.org/W3049345403","https://openalex.org/W3110603219","https://openalex.org/W3117176175","https://openalex.org/W3146664580","https://openalex.org/W3160027900","https://openalex.org/W6632410262","https://openalex.org/W6681749759","https://openalex.org/W6768851449","https://openalex.org/W6772849236","https://openalex.org/W6782179865"],"related_works":["https://openalex.org/W2093798919","https://openalex.org/W4392012696","https://openalex.org/W4395453412","https://openalex.org/W3022695109","https://openalex.org/W3023506809","https://openalex.org/W2393298610","https://openalex.org/W2941888532","https://openalex.org/W4253316174","https://openalex.org/W3101929529","https://openalex.org/W2390304521"],"abstract_inverted_index":{"Multi-factor":[0],"authentication":[1,13,18],"(MFA)":[2],"has":[3],"been":[4],"widely":[5],"used":[6],"to":[7,25,34,58,92,117,243],"safeguard":[8],"high-value":[9],"assets.":[10],"Unlike":[11],"single-factor":[12],"(e.g.,":[14],"password-only":[15],"login),":[16],"t-factor":[17],"(":[19],"tFA)":[20],"requires":[21,197],"a":[22,79,90,151,163],"user":[23,44,55,91],"always":[24],"carry":[26],"and":[27,71,124,168,202,229,234,247],"present":[28],"t":[29,95],"specified":[30],"factors":[31,61,96],"so":[32],"as":[33,130,132],"strengthen":[35],"the":[36,48,54,106,112,137,141,147,160,177,185,214,222],"security":[37,109,144,179,224],"of":[38,50,75,82,98,128,162,187,218],"login.":[39],"Nevertheless,":[40],"this":[41],"may":[42,56],"restrict":[43],"experience":[45],"in":[46,146,184],"limiting":[47],"flexibility":[49,72],"factor":[51],"usage,":[52],"e.g.,":[53],"prefer":[57],"choose":[59,94],"any":[60,126],"at":[62],"hand":[63],"for":[64,111,192],"login":[65],"authentication.":[66],"To":[67],"bring":[68],"back":[69],"usability":[70],"without":[73],"loss":[74],"security,":[76],"we":[77],"introduce":[78],"new":[80,113],"notion":[81],"authentication,":[83],"called":[84],"(t,n)":[85],"threshold":[86,152,164],"MFA,":[87],"that":[88,136],"allows":[89],"actively":[93],"out":[97],"n":[99],"based":[100],"on":[101,159,232,240],"preference.":[102],"We":[103,134,149,236],"further":[104],"define":[105],"\u201cmost-rigorous\u201d":[107],"multi-factor":[108],"model":[110,138],"notion,":[114],"allowing":[115],"attackers":[116],"control":[118],"public":[119],"channels,":[120],"launch":[121],"active/passive":[122],"attacks,":[123],"compromise/corrupt":[125],"subset":[127],"parties":[129],"well":[131],"factors.":[133],"state":[135],"can":[139],"capture":[140],"most":[142,227],"practical":[143],"needs":[145],"literature.":[148],"design":[150,195,239],"MFA":[153],"key":[154,171],"exchange":[155,172],"(T-MFAKE)":[156],"protocol":[157,175,220],"built":[158],"top":[161],"oblivious":[165],"pseudorandom":[166],"function":[167],"an":[169],"authenticated":[170],"protocol.":[173],"Our":[174],"achieves":[176,221],"\u201chighest-attainable\u201d":[178],"against":[180],"all":[181],"attacking":[182],"attempts":[183],"context":[186],"parties/factors":[188],"being":[189],"compromised/corrupted.":[190],"As":[191],"efficiency,":[193],"our":[194,219,238],"only":[196],"4+t":[198],"exponentiations,":[199],"2":[200],"multi-exponentiations":[201],"<b":[203],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[204],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">2</b>":[205],"communication":[206],"rounds.":[207],"Compared":[208],"with":[209],"existing":[210],"tFA":[211],"schemes,":[212],"even":[213],"degenerated":[215],"(t,t)":[216],"version":[217],"strongest":[223],"(stronger":[225],"than":[226],"schemes)":[228],"higher":[230],"efficiency":[231],"computational":[233],"communication.":[235],"instantiate":[237],"real-world":[241],"platform":[242],"highlight":[244],"its":[245],"practicability":[246],"efficiency.":[248]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":2}],"updated_date":"2026-07-14T08:27:34.040176","created_date":"2025-10-10T00:00:00"}