Authentication Process Research Articles

Compact Issuer-Hiding Authentication, Application to Anonymous Credential

Anonymous credentials are cryptographic mechanisms enabling users to authenticate themselves with a fine-grained control on the information they leak in the process. They have been the topic of countless papers which have improved the performance of such mechanisms or proposed new schemes able to prove ever-more complex statements about the attributes certified by those credentials. However, although these papers have studied in depth the problem of the information leaked by the credential and/or the attributes, almost all of them have surprisingly overlooked the information one may infer from the knowledge of the credential issuer. In this paper we address this problem by showing how one can efficiently hide the actual issuer of a credential within a set of potential issuers. The novelty of our work is that we do not resort to zero-knowledge proofs but instead we show how one can tweak Pointcheval-Sanders signatures to achieve this issuer-hiding property in a compact way. This results in an efficient anonymous credential system that indeed provides a complete control of the information leaked in the authentication process. Our construction is moreover modular and can then fit a wide spectrum of applications, notably for Self-Sovereign Identity (SSI) systems.

Analyzing the Role of Blockchain in Identity and Access Management Systems

In today's digital world, protecting identities and securing access to sensitive data are crucial tasks. Traditional centralized Identity and Access Management (IAM) systems are vulnerable to data breaches and unauthorized intrusions. Blockchain technology has emerged as a promising solution to bolster IAM systems by decentralizing control and enhancing security measures. This paper explores the integration of blockchain technology into IAM frameworks to address the shortcomings of centralized systems. It examines the fundamental principles of blockchain, highlighting its immutability, decentralization, and cryptographic security features. By leveraging these attributes, blockchain-based IAM systems offer a robust infrastructure for identity verification, authentication, and authorization processes. Various use cases of blockchain in IAM are discussed, including self-sovereign identity, decentralized authentication protocols, and secure data sharing mechanisms. The paper elucidates how blockchain enhances trust and transparency in identity management, granting individuals greater control over their personal data while ensuring privacy and security. It also scrutinizes the challenges and considerations associated with implementing blockchain-based IAM solutions, such as scalability, interoperability, and regulatory compliance. Additionally, the paper explores potential future developments and trends in this evolving field, emphasizing the importance of collaboration between industry stakeholders and regulatory bodies to foster innovation while addressing security and privacy concerns. In summary, this paper underscores the transformative potential of blockchain technology in fortifying IAM systems, leading to a more secure and resilient digital ecosystem.

Adoption of Bloom Filter and Firebase Framework to Enhance Authentication Time for Healthcare Systems Based on Blockchain Technology

Healthcare offers several advantages for actual-time smart healthcare. security concerns are growing due to its constrained computing power, storage capacity, and self-defense capabilities. The tamper-resistant decentralized architecture of more recent blockchain-based authentication solutions gives them significant security features, but they come with a high resource cost because they need a lot of processing power, additional storage, and lengthy authentication processes. Therefore, these challenges offer impediments to achieving the optimal degrees of temporal efficiency and scalability, which are critical for the effective operation of large-scale, time-sensitive IoHT systems. Our work provides an authentication solution specifically created for healthcare systems to address these issues. We work in three phases: initializing, registering, logging in, and authenticating. The suggested system combines blockchain technology, Firebase Framework, Bloom Filter, Multi-Factor authentication, and other elements to improve security and efficiency at the same time. We use the Python programming language to simulate the work, and our findings indicate that the Bloom filter decreases the amount of time it takes to determine whether a person is in the system compared to the previous way. Moreover, using Firebase may reduce transaction numbers by up to 73%. Using the Scyther tool, a security analysis of the proposed scheme proved that the suggested plan is safe from possible threats and maintains the IoHT system's scalability

Development of a Face Recognition System for Authentication in Computer-Based Examinations: A Comparison with Fingerprint Verification

This study aims to overcome the limitations of fingerprint biometric authentication in computer-based examinations by introducing a robust face recognition system. The research targets key challenges such as administrative overhead, prolonged authentication times, and issues with false positives and negatives. By leveraging advanced technologies like Multi-Task Cascaded Convolutional Neural Network (MTCNN) for precise facial detection and FaceNet for efficient facial feature embedding, the developed system achieves substantial improvements across critical metrics. The evaluation metrics consistently report high ratings: accuracy 90%, speed 92%, ease of use 86%, robustness to variations 94%, security 92%, and privacy 90%. Evaluation of the system shows its superiority over traditional fingerprint methods. It demonstrates notably higher accuracy, efficiency, user-friendliness, adaptability to diverse conditions, and enhanced levels of security and privacy. These advancements position the face recognition system as a compelling alternative for enhancing the authentication processes in computer-based examinations. Keywords: FaceNet, Multi-Task Cascaded Convolutional Neural Network, Face Recognition, Security, Face, Fingerprint Detection. Sulaimon O.O., Olabiyisi, S.O. & Ismaila, W.O. (2024): Development of a Face Recognition System for Authentication in Computer-Based Examinations: A Comparison with Fingerprint Verification. Journal of Advances in Mathematical & Computational Science. Vol. 12, No. 2. Pp 117-128. Available online at www.isteams.net/mathematics-computationaljournal. dx.doi.org/10.22624/AIMS/MATHS/V12N2P8

Main Primitive and Cryptography Tools for Authentication in VANET Environment: Literature Review

Vehicular ad hoc networks (VANETs) provide the potential to improve transportation efficiency by facilitating the sharing of traffic information among vehicles. Acceptance of VANET depends on communication speed and accuracy as well as privacy protection guaranteeing an individual's safety. Vehicle authentication is necessary to ensure message correctness. This necessitates the implementation of an effective privacy-preserving authentication scheme, as well as the need for both secrecy and timebound delivery of messages. Various privacy-preserving authentication schemes have been suggested to guarantee the integrity of messages in communications. However, most of the schemes are not able to solve issues related to computing costs, communication, security, privacy, threats, and vulnerabilities. In this review, we focus on cryptographic strategies that are suggested to accomplish privacy and authentication, such as identity-based, public key cryptography-based, pseudonym-based, and blockchain-based schemes. We provide a thorough analysis of schemes, including their categorizations, advantages, and drawbacks. The study demonstrates that the majority of current authentication techniques necessitate trusted authorities that lack transparency in their operations. Additionally, authentication process incurs substantial computational and communication overhead, leading to a considerable impact on the timely delivery of messages. More efforts are required to enhance the development of efficient authentication schemes in VANETs.

Investigation of authentication methods on web services. Current trends and development prospects

In the development of information technology, software and data protection on web services are of great importance. To ensure security, various methods are used, and one of the main ones is the user authentication process. They use different authentication methods: password, two-factor authentication, biometric, multi-factor, based on artificial intelligence and blockchain technologies. Despite their diversity, each method has its own advantages and disadvantages. Current trends in authentication include combining different methods to increase reliability and improve the user experience. The future of this technology involves finding new ways to balance security and usability, as well as continually updating and adapting methods to changing security threats. This article conducts a study of various authentication methods for web services in order to identify their effectiveness, advantages and disadvantages.

Visions of the Future: What Could Happen to User Authentication?

The most prevalent information system security feature for the user is the authentication process. Passwords have been the primary authentication method for decades due to their simplicity for both the user and the system provider. However, over recent years, the digitalization of services has increased the number of credentials each user must manage, making traditional password authentication problematic for the user. Strong candidates for easier and more secure authentication methods are emerging (e.g., FIDO alliance, Single-sign-on, biometrics). Still, a single method has yet to dominate the market due to the rapid changes in technology, costs of implementation, trust in these methods, and the vast number of users and digital services. Due to the varied reasons that affect the adoption of these methods, it is unclear what kinds of authentication methods will be the forerunners in the future. This study aims to envision the future of user authentication and security features emerging from the interaction of different factors. We present a qualitative interview study, which examines six experts from the fields of authentication, cybersecurity, and emerging technologies. A hermeneutic mode of analysis is used to form scenarios of the future based on the observations of different experts. The results reflect an understanding of how users and their interactions with security features, such as authentication, may change over the following decade and beyond and how security professionals intend to incorporate this knowledge into future security systems. The results shed light on the influence of society, developing technology, and the need for user- and future-proof security in the coming years. This study will have several implications, as it will contribute to forming a coherent picture of the different elements that shape the future and give an idea of how to prepare for what is coming. Furthermore, it will provide an understanding of how choices with technology today lead to different futures.

Multi-Factor Authentication: A User Experience Study

Usability issues prevent multi-factor authentication (MFA) systems from being widely used, despite the fact that they are essential for improving security measures. This study explores the problems with MFA systems' usability and suggests possible fixes to enhance the user experience. The study emphasizes the value of good design while highlighting the efficacy of graphical password systems as a user-friendly substitute for conventional MFA techniques. The report also makes recommendations for future research directions, such as assessing resilience against complex assaults, improving support for mobile applications, and weighing the benefits and drawbacks of image-based authentication systems. Comprehensive user research and assessments can yield important insights to improve the effectiveness and usability of different MFA approaches. Additionally, a two-way image-based mobile device authentication system devices is introduced in the article, demonstrating improved login success rates and security threat resistance. In order to further enhance the authentication process, future development will focus on scalability, user input surveys, and bolstering system security. Keywords: Multi-Factor Authentication (MFA), User Experience (UX), Security, Usability, Graphical Passwords, Biometric Authentication, Mobile Devices, Image- Based Authentication, Psychological Aspects, Resilience,Scalability, Advanced Security Features

The Evaluating Impact of Artificial Intelligence on Risk Management and Fraud Detection in the Commercial Bank in Bangladesh

The integration of Artificial Intelligence (AI) in the banking sector represents a significant leap forward in the realms of risk management and fraud detection. This paper explores the transformative effects of AI in these areas, emphasizing both the improvements and the challenges brought about by its implementation. In risk management, AI's influence is diverse and profound. Advanced algorithms allow for the creation of more sophisticated credit risk assessment models by detecting subtle patterns in large datasets that might be overlooked by human analysts. This capability enhances the accuracy of credit risk evaluations. Additionally, real-time monitoring of transactions helps in the immediate mitigation of risks, which is particularly crucial when dealing with market and liquidity risks. AI also significantly aids in automating compliance with regulatory requirements, reducing the likelihood of human errors and enabling quicker adaptation to changes in regulations. Operational risks are also minimized through AI's ability to automate routine tasks and strengthen cybersecurity measures. AI systems are adept at identifying anomalies that may indicate fraud by scrutinizing transaction data and customer behavior. The predictive capabilities of AI enable banks to anticipate and prevent potential fraud schemes. Moreover, AI systems can adapt and evolve in response to changing tactics used by fraudsters, maintaining their effectiveness over time. AI enhances customer authentication processes through the use of advanced technologies such as biometric verification, providing an additional layer of security. However, the implementation of AI in banking raises significant concerns regarding data privacy and security due to the sensitive nature of banking information. Furthermore, AI models can inherently carry biases that lead to discriminatory outcomes, necessitating ongoing monitoring and adjustments to these models. The complexity and lack of transparency in AI systems also pose challenges, particularly when AI-driven decisions have significant impacts on customers. The evolving regulatory frameworks for AI in banking present another layer of complexity, as banks must continuously adapt to comply with new and changing regulations. This paper highlights the need for a balanced approach to leveraging AI's potential in banking, addressing both its transformative benefits and the ethical and regulatory challenges involved. By doing so, banks can harness AI to enhance their operations while ensuring fairness, transparency, and compliance with regulatory standards.

Multiple-image authentication based on metasurface and phase retrieval with sparsity constraints

In this paper, a multiple-image authentication method is proposed based on metasurface and phase retrieval with sparsity constraints. In the encryption process, multiple plaintext images are firstly encrypted to a phase-only hologram by using phase retrieval algorithm with sparsity constraints and iterative Fourier transform algorithm, and then the phase-only hologram is converted into a metasurface hologram for multiple-image authentication with the help of a geometric-phase metasurface unit, greatly expanding the encoding information capacity of metasurface for authentication. In the authentication process, the reconstructed image of metasurface hologram is respectively authenticated with multiple plaintext images through nonlinear correlation authentication such that multiple identities of the user holding this metasurface can be simultaneously verified, overcoming the problem that the metasurface for authentication and user identity can only be one-to-one, and substantially improving the efficiency of identity authentication. In order to demonstrate the feasibility of the proposed multiple-image authentication method, a series of numerical simulations are performed, and the simulation results show that the proposed method exhibits high feasibility and security as well as authentication efficiency, and the metasurface for multiple-image authentication has strong robustness against cropping attack.

An edge-assisted group authentication scheme for the narrowband internet of things

As an emerging wireless communication technology, narrowband Internet of Things is widely used in various scenarios, but it also brings new security problems, especially the group authentication between terminal devices and servers. In narrowband Internet of Things, terminal devices are often deployed in unattended environments, which are vulnerable to various attacks and controlled by adversaries, resulting in identity information leakage. Secondly, a large number of terminal devices send authentication request information to the server at the same time, which is easy to cause network signaling congestion, and the centralized calculation mode of the server will cause a large delay in the authentication process. To solve these problems, we propose an edge-assisted group authentication scheme for narrowband Internet of Things. Firstly, a lightweight encryption algorithm LCHAOSAES was used to encrypt the terminal device identity to prevent the terminal device identity information leakage. Then, the edge computing method was used to add an edge network layer to the NB-IoT system architecture to assist in completing the group authentication of massive terminal devices, and the edge assistance could realize decentralization and reduce the load of centralized processing of the server. The Burrows Abadi Needham logic verification, informal security analysis and performance analysis show that the proposed scheme is robust under malicious attacks such as replay attack, man-in-the-middle attack and insider attack, and has less signaling overhead and delay.

Continuous Integration for New Service Deployment and Service Validation Script for Vault

Modern cloud-native applications demand robust security measures to safeguard sensitive data such as passwords, API keys, and encryption keys. Managing these secrets securely within Kubernetes clusters presents a significant challenge. In response, this project proposes a comprehensive solution leverag- ing HashiCorp Vault, Kubernetes, and Docker to enhance secret management and strengthen overall security posture.HashiCorp Vault serves as a centralized secrets management tool, provid- ing encryption, access control, and auditing functionalities. By integrating Vault with Kubernetes, secrets can be dynamically generated, securely stored, and automatically injected into ap- plication pods at runtime. This approach reduces the exposure of sensitive information within containerized environments and mitigates the risk of unauthorized access. The project architecture involves deploying Vault within the Kubernetes cluster, utilizing Docker containers for seamless encapsulation and portability. Kubernetes’ native integrations with Vault, such as the Kubernetes Auth method and the Vault Agent Injector, streamline the authentication and authorization processes, ensuring secure communication between applications and Vault. The project involves deploying Vault in Kubernetes for secrets management, ensuring High Availability. It focuses on generating, storing, and managing secrets securely, leveraging Vault’s dynamic secrets engine for automatic rotation. Integration with Kubernetes employs authentication methods like Service Accounts and RBAC for granular access control. Dockerization ensures application consistency and portability, with Vault Agent containers enabling seamless secret injection. Security best practices, including least privilege access and encryption, are prioritized, along with regular auditing and monitoring. Overall, the project aims to establish a robust secrets management solution within Kubernetes while empha- sizing resilience, security, and compliance in handling sensitive information. Index Terms—Docker, DevOps, CI/CD, Automation, Secrets, Kubernetes, Vault, Security

Enhancing Computer Security through Formal Verification of Cryptographic Protocols Using Model Checking and Partial Order Techniques

This study explores the integration of partial, order reduction techniques with model checking to enhance the verification of cryptographic protocols. Cryptographic, protocols are essential for securing digital communications, and data; however, ensuring their robustness and reliability through traditional verification methods can be challenging due to, their complexity and the vast number of potential executions, paths. This research utilizes the SPIN, model checker and PROMELA language to model and verify three types of, cryptographic protocols: a basic authentication handshake, an encrypted data transfer, protocol, and a complex, multi-factor authentication process. Each protocol was, verified with and, without the application of partial order reduction techniques. The findings demonstrate that partial order, reduction, not only significantly reduces the computational resources, required—by approximately 40%—but also maintains the thoroughness needed to identify critical, security flaws such as replay, attacks, data integrity breaches, and authentication failures. This study, underscores the, efficacy of combining partial order reduction with model, checking, proposing that this, approach significantly improves the scalability and efficiency, of cryptographic protocol, verification. The results advocate, for the continued development and application of these, techniques to ensure the secure and reliable deployment of cryptographic protocols in various digital environments

Privacy Preserving Authentication of IoMT in Cloud Computing

INTRODUCTION: The Internet of Medical Things (IoMT) blends the healthcare industry with the IoT ecosystem and enables the creation, collection, transmission, and analysis of medical data through IoT networking. IoT networks consist of various healthcare IT systems, healthcare sensors, and healthcare management software. OBJECTIVES: The IoMT breathes new life into the healthcare system by building a network that is intelligent, accessible, integrated, and effective. Privacy-preserving authentication in IoMT is difficult due to the distributed communication environment of heterogeneous IoMT devices. Although there has been numerous research on potential IoMT device authentication methods, there is still more to be done in terms of user authentication to deliver long-term IoMT solutions. However, password handling is one of the big challenges of IoMT. METHODS: In this paper, we present an IoMT-related online password-less authentication technique that is quick, effective, and safe. In order to offer cross-platform functionality, the article includes a simulation of FIDO2/WebAuthn, one of the most recent standards for a password-less authentication mechanism. RESULTS: This makes it easier to secure user credentials and improve them while preserving anonymity. The IoMT device authentication process and registration process delays are also assessed. CONCLUSION: Results and simulations show that the efficacy of the proposed mechanism with quick authentication on cloud servers may be accomplished with the fewest registration and authentication procedures, regardless of device setup.

Blockchain-Enabled Conceptual Framework for Enhancing Academic Transcript Issuance and Authentication in the Nigerian Educational System

The issuing and authentication of academic transcripts are essential in the ever-changing landscape of educational systems since they serve as a means of validating an individual's academic achievements. However, difficulties in confirming these transcripts' authenticity exacerbated by manual procedures and paper-based system have raised questions about their legitimacy, especially in Nigeria. To address these urgent issues, this research presents a conceptual revolutionary blockchain-based framework for the Nigerian education system. The suggested solution will reduce dependency on issuing institutions and improve system efficiency by providing digital transcripts and automated authentication processes by utilizing blockchain's decentralized nature, transparency, and security features. The system will use blockchain-stored hash values for authentication and integrates on-chain revocation features to protect data integrity, reduce fraud risks, and enable quick and dependable authentication. By filling a vacuum in the literature, concentrating on issues unique to transcripts, and offering a contextually appropriate solution that has the potential to completely transform the Nigerian academic transcript issuance and authentication process, this work advances our collective understanding.

Criticality of Spray Solvent Choice on the Performance of Next Generation, Spray-Based Ambient Mass Spectrometric Ionization Sources: A Case Study Based on Synthetic Cannabinoid Forensic Evidence

Mass spectrometry (MS) is a highly selective and sensitive analytical tool with a myriad of applications, but such techniques are typically used in laboratory settings due to the handling and preparations that are necessary. The merging of two streams of robust research, portable MS systems and next-generation ambient ionization methods, now provides the ability to perform high-performance chemical screening in an on-site and on-demand manner, with natural applications in disciplines such as forensic science, where samples of interest are typically found in field environments (i.e., traffic stops, crime scenes, etc.). Correspondingly, investigations regarding the suitability and robustness of these methodologies when they are utilized for authentic forensic evidence processing are prudent. This work reports critical insights into the role that choice of spray solvent system plays regarding analytical performance of two spray-based ambient ionization sources, paper spray ionization (PSI) and filter cone spray ionization (FCSI), when employed for evidence types containing emerging synthetic cannabinoids. The systematic characterization studies reported herein show that the applied spray solvent can dramatically affect both spectral intensity and signal duration, and in some circumstances, yield deleterious false negative responses. Overall, acetonitrile-based systems are shown to strike a balance between analyte solubility concerns and spray ionization dynamics of the novel ion sources employed on portable MS systems.

OPEN SOURCE DEVELOPER SUPPORT TOOL

Abstract : This research paper explores the development and implementation of an open-source developer support tool aimed at providing financial and motivational support to open-source developers. By creating a platform where users can post questions with optional bounties, this project seeks to address the longstanding issue of uncompensated efforts within the open-source community, which has been a significant barrier to the sustainability and growth of many open-source projects. The platform leverages cutting-edge technologies such as Next.js, PostgreSQL, and Stripe to create a seamless and secure environment for both users and developers. Next.js is utilized for building the front-end and back-end of the application, providing server-side rendering and static site generation for improved performance and user experience. PostgreSQL serves as the robust and scalable database management system, ensuring data integrity and efficient query handling. Stripe is integrated for secure authentication and payment processing, enabling financial transactions between users and developers. The motivation behind this project stems from the recognition that open-source software is a critical component of modern technology infrastructure, yet the contributors often lack adequate financial and motivational support. This research delves deeply into the problem definition, outlining the specific challenges faced by open-source developers, including financial instability, lack of recognition, and limited feedback. The objectives of the project are clearly defined, aiming to create a sustainable support system that fosters community engagement and rewards contributors for their valuable work. This paper also details the software and hardware specifications required for the development and deployment of the platform, ensuring that the solution is both practical and scalable. Project planning is a crucial element of this research, with a comprehensive roadmap that includes requirement analysis, design, development, testing, and deployment phases. Each phase is meticulously planned to address potential challenges and ensure the successful implementation of the support tool. Finally, the future scope of the project is discussed, emphasizing the importance of continuous improvement and adaptation to meet the evolving needs of the open-source community. This includes potential enhancements such as advanced spam detection, enhanced user feedback mechanisms, and the integration of additional features to further support and motivate open-source contributors. By addressing these critical aspects, this research underscores the significance of supporting open-source contributors and highlights the potential of the proposed platform to make a meaningful impact on the sustainability and growth of open-source projects. IndexTerms – Open Source, Developer Support, Bounty System, Next.js, PostgreSQL, Stripe, Community Engagement.

Blockchain-assisted full-session key agreement for secure data sharing in cloud computing

Data sharing in cloud computing allows multiple data owners to freely share their data resources while security and privacy issues remain inevitable challenges. As a foundation of secure communication, authenticated key agreement (AKA) scheme has been recognized as a promising approach to solve such problems. However, most existing AKA schemes are based on the cloud-based architecture, privacy and security issues will inevitably occur once the centralized authority is attacked. Besides, most previous schemes require an online registration authority for authentication, which may consume significant resources. To address these drawbacks, for secure data sharing in cloud computing, a blockchain-assisted full-session key agreement scheme is proposed. After the registration phase, the registration authority does not engage in authentication and key agreement process. By utilizing blockchain technology, a common session key between the remote user and cloud server can be negotiated, and a shared group key among multiple remote users can be negotiated without private information leakage. Formal and informal security proof demonstrated the proposed scheme is able to meet the security and privacy requirements. The detail performance evaluation shows that the proposed scheme has lower computation costs and acceptable communication overheads while superior security is ensured.

Password based Smart Doorlock System using Arduino UNO for Enhanced Security

In recent years, the demand for secure access systems has increased significantly, especially in residential and commercial areas. Hence, this presents the design and implementation of a password-based door lock system using an Arduino microcontroller and a servo motor. The system provides a cost-effective and reliable solution for managing access to physical sites. The proposed system uses an Arduino microcontroller as the central device to control the authentication process and to control the servo motor that operates the door locking mechanism. A matrix keyboard is used to enter the password, which provides a user-friendly interface for communication. The servo motor is responsible for physically locking and unlocking the door mechanism based on the authentication result. The operational workflow of the system requires the user to enter a predetermined password using a keyboard. The Arduino microcontroller compares the entered password with the password stored in its memory. After successful authentication, a servo motor is operated to open the door, allowing access to the authorized person. Conversely, failed authentication will result in access being denied.

Auth4App: Streamlining authentication for integrated cyber–physical environments

The growing integration of mobile applications for user authentication has revolutionized user interactions with digital platforms, offering novel possibilities in user experience (UX). However, this paradigm shift poses significant security challenges. Leveraging smartphones for authentication purposes provides convenient and swift access to services, streamlining user interactions with various platforms through simple taps. Several institutions adopt static QR Codes generated from primary, unchanging user data (e.g., individual citizen national identification numbers) for physical authentication procedures like access turnstiles. However, relying on static data introduces critical security vulnerabilities as this data is susceptible to compromise. Implementing an One-Time Authentication Code (OTAC) approach appears promising in addressing these issues. Nevertheless, the absence of an integrated solution for developing a physical authentication process using OTAC leads to suboptimal API user experiences (UX APIs) and subsequent security vulnerabilities. In response to this challenge, we introduce Auth4App, a protocol set designed for identification and authentication using mobile applications. Auth4App comprises two core protocols: one dedicated to linking user credentials to mobile devices (i.e., identification), and the other for generating OTAC. We showcase the adaptability and practicality of Auth4App through three distinct case studies: a mobile-only scenario, integration of mobile devices with a turnstile, and integration of Auth4App with FIDO2. To ensure the robustness of the security protocols, Auth4App is evaluated using automated verification tools and argument proofs, solidifying the system’s reliability.