Post-Quantum Secure Multi-Factor Authentication Protocol for Multi-Server Architecture
The multi-factor authentication (MFA) protocol requires users to provide a combination of a password, a smart card and biometric data as verification factors to gain access to the services they need. In a single-server MFA system, users accessing multiple distinct servers must register separately fo...
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2025-07-01
|
| Series: | Entropy |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1099-4300/27/7/765 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1839616018493734912 |
|---|---|
| author | Yunhua Wen Yandong Su Wei Li |
| author_facet | Yunhua Wen Yandong Su Wei Li |
| author_sort | Yunhua Wen |
| collection | DOAJ |
| description | The multi-factor authentication (MFA) protocol requires users to provide a combination of a password, a smart card and biometric data as verification factors to gain access to the services they need. In a single-server MFA system, users accessing multiple distinct servers must register separately for each server, manage multiple smart cards, and remember numerous passwords. In contrast, an MFA system designed for multi-server architecture allows users to register once at a registration center (RC) and then access all associated servers with a single smart card and one password. MFA with an offline RC addresses the computational bottleneck and single-point failure issues associated with the RC. In this paper, we propose a post-quantum secure MFA protocol for a multi-server architecture with an offline RC. Our MFA protocol utilizes the post-quantum secure Kyber key encapsulation mechanism and an information-theoretically secure fuzzy extractor as its building blocks. We formally prove the post-quantum semantic security of our MFA protocol under the real or random (ROR) model in the random oracle paradigm. Compared to related protocols, our protocol achieves higher efficiency and maintains reasonable communication overhead. |
| format | Article |
| id | doaj-art-3481bc22218c41b2b0593bbf57ef3404 |
| institution | Matheson Library |
| issn | 1099-4300 |
| language | English |
| publishDate | 2025-07-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Entropy |
| spelling | doaj-art-3481bc22218c41b2b0593bbf57ef34042025-07-25T13:22:27ZengMDPI AGEntropy1099-43002025-07-0127776510.3390/e27070765Post-Quantum Secure Multi-Factor Authentication Protocol for Multi-Server ArchitectureYunhua Wen0Yandong Su1Wei Li2School of Computer Science and Technology, Donghua University, Shanghai 201620, ChinaSchool of Computer Science and Technology, Donghua University, Shanghai 201620, ChinaSchool of Computer Science and Technology, Donghua University, Shanghai 201620, ChinaThe multi-factor authentication (MFA) protocol requires users to provide a combination of a password, a smart card and biometric data as verification factors to gain access to the services they need. In a single-server MFA system, users accessing multiple distinct servers must register separately for each server, manage multiple smart cards, and remember numerous passwords. In contrast, an MFA system designed for multi-server architecture allows users to register once at a registration center (RC) and then access all associated servers with a single smart card and one password. MFA with an offline RC addresses the computational bottleneck and single-point failure issues associated with the RC. In this paper, we propose a post-quantum secure MFA protocol for a multi-server architecture with an offline RC. Our MFA protocol utilizes the post-quantum secure Kyber key encapsulation mechanism and an information-theoretically secure fuzzy extractor as its building blocks. We formally prove the post-quantum semantic security of our MFA protocol under the real or random (ROR) model in the random oracle paradigm. Compared to related protocols, our protocol achieves higher efficiency and maintains reasonable communication overhead.https://www.mdpi.com/1099-4300/27/7/765multi-factor authenticationfuzzy extractorreal or random modelpost-quantum securitykey encapsulation mechanismlattice-based cryptography |
| spellingShingle | Yunhua Wen Yandong Su Wei Li Post-Quantum Secure Multi-Factor Authentication Protocol for Multi-Server Architecture Entropy multi-factor authentication fuzzy extractor real or random model post-quantum security key encapsulation mechanism lattice-based cryptography |
| title | Post-Quantum Secure Multi-Factor Authentication Protocol for Multi-Server Architecture |
| title_full | Post-Quantum Secure Multi-Factor Authentication Protocol for Multi-Server Architecture |
| title_fullStr | Post-Quantum Secure Multi-Factor Authentication Protocol for Multi-Server Architecture |
| title_full_unstemmed | Post-Quantum Secure Multi-Factor Authentication Protocol for Multi-Server Architecture |
| title_short | Post-Quantum Secure Multi-Factor Authentication Protocol for Multi-Server Architecture |
| title_sort | post quantum secure multi factor authentication protocol for multi server architecture |
| topic | multi-factor authentication fuzzy extractor real or random model post-quantum security key encapsulation mechanism lattice-based cryptography |
| url | https://www.mdpi.com/1099-4300/27/7/765 |
| work_keys_str_mv | AT yunhuawen postquantumsecuremultifactorauthenticationprotocolformultiserverarchitecture AT yandongsu postquantumsecuremultifactorauthenticationprotocolformultiserverarchitecture AT weili postquantumsecuremultifactorauthenticationprotocolformultiserverarchitecture |