A Continuous LoA Compliant Trust Evaluation Method

Julien Hatin (1, 2) , Estelle Cherrier (2) , Jean-Jacques Schwartzmann (2, 1) , Vincent Frey (3) , Christophe Rosenberger (2)

1 Orange Labs [Caen]
2 Equipe SAFE - Laboratoire GREYC - UMR6072
3 Orange Labs R&D [Rennes]

The trust provided by authentication systems is commonly expressed with a Level of Assurance (LoA see 3). If it can be considered as a first process to simplify the expression of trust during the authentication step, it does not handle all the aspects of the authentication mechanism and especially it fails to integrate continuous authentication systems. In this paper, we propose a model based on the Dempster Shafer theory to merge continuous authentication system with more traditional static authentication scheme and to assign a continuous trust level to the current LoA. In addition, this method is proved to be compliant with the LoA frameworks.

Mots clés: trust level; continuous authentication; mobile device

Domaines: Cryptographie et sécurité [cs.CR]

Julien Hatin, Estelle Cherrier, Jean-Jacques Schwartzmann, Vincent Frey, Christophe Rosenberger. A Continuous LoA Compliant Trust Evaluation Method. International Conference on Information Systems Security and Privacy (ICISSP), Feb 2016, Rome, Italy. ⟨hal-01286834⟩