A Strong Authentication Method for Web/Mobile Services

This paper presents an original and strong authentication method for cloud services from smartphones. It is based on a two-factor scheme improved by the diversity of devices and network channels. It combines an OTP -based approach using an IoT object as a secondary device. Authentication factors are transmitted over different channels implementing distinct protocol stacks (LTE , LPWAN , ...). The proposal uses end-to-end encryption for the transfer of sensitive data. An experimental application of the method is illustrated by analyzing authorization access issues to cloud services located in a trusted zone. A platform developed to test the approach is briefly presented.