A Novel Protocol Using Captive Portals for FIDO2 Network Authentication

arXiv:2402.12864v1 Announce Type: new
Abstract: FIDO2 authentication is starting to be applied in numerous web authentication services, aiming to replace passwords and their known vulnerabilities. However, this new authentication method has not been integrated yet with network authentication systems. In this paper, we introduce FIDO2CAP: FIDO2 Captive-portal Authentication Protocol. Our proposal describes a novel protocol for captive-portal network authentication using FIDO2 authenticators, as security keys and passkeys. For validating our proposal, we have developed a prototype of FIDO2CAP authentication in …

arxiv authentication cs.cr cs.ni cs.se fido2 known vulnerabilities network novel passwords portal protocol services systems vulnerabilities web web authentication