A Catalog of User Authentication Patterns

• URL: http://arxiv.org/abs/2608.26955v1
• Date: Thu, 27 Aug 2026 10:54:22 GMT
• Title: A Catalog of User Authentication Patterns
• Abstract summary: This paper presents a novel authentication pattern catalog, comprising 14 user authentication patterns.<n>It aims to make an important contribution to supporting software engineers and architects in designing and developing secure software systems.
• Score: 0.0
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Security patterns are intended to support the design and development of secure software systems. However, although established catalogs of security patterns exist, their practical application remains limited. In particular, despite these catalogs, concrete patterns for common security controls such as user authentication (authentication for short) are lacking. This paper aims to make an initial contribution toward closing this gap, as exemplified by authentication. It presents a novel authentication pattern catalog, comprising 14 user authentication patterns. To support the catalog's practical application, it classifies patterns by the well-known concept of authentication factors and by the usual role each pattern fulfills in practice. By cataloging common authentication techniques through authentication patterns, we aim to make an important contribution to supporting software engineers and architects in designing and developing secure software systems.

Related papers

• SFDS: Selective File Disclosure System [0.0]
  This paper proposes an architecture based on the Selective Web Token (SD-JWT) standard for securely sharing read-only files.<n>The proposed architecture embeds cryptographic signatures and integrity protection directly into the shared resource, providing verifiable authenticity without relying on complex infrastructures.
  arXiv  Detail & Related papers  (2026-07-10T12:50:45Z)
• Bridging Theory and Practice: An Executable Taxonomy of Security Properties for ProVerif and Tamarin [0.9339654135645749]
  Security is critical for everything relying on modern digital systems.<n>Tools such as ProVerif and Tamarin are widely employed to perform automated verification.<n>This work advances the state of the art by bridging the gap between theoretical security property definitions and their practical, executable verification models.
  arXiv  Detail & Related papers  (2026-05-28T06:57:08Z)
• Scalable Secure Biometric Authentication without Auxiliary Identifiers [54.032594016239926]
  We present a new biometric authentication system that provides provable security guarantees against data breaches.<n>Our work is the first to show that real-world scalable privacy-preserving biometric authentication without auxiliary identifiers is feasible.
  arXiv  Detail & Related papers  (2026-04-27T23:55:09Z)
• A Faceted Classification of Authenticator-Centric Authentication Techniques [0.0]
  This paper presents novel, faceted classification schemes for AuthN Techniques and Authenticators.<n>The classification schemes were applied to build a catalog of Authenticators and AuthN Techniques.<n>This paper presents our methodology, the classification schemes with example applications, the list of AuthN Techniques from the catalog, and discussions on future work.
  arXiv  Detail & Related papers  (2026-04-04T07:48:26Z)
• Bridging the Mobile Trust Gap: A Zero Trust Framework for Consumer-Facing Applications [51.56484100374058]
  This paper proposes an extended Zero Trust model designed for mobile applications operating in untrusted, user-controlled environments.<n>Using a design science methodology, the study introduced a six-pillar framework that supports runtime enforcement of trust.<n>The proposed model offers a practical and standards-aligned approach to securing mobile applications beyond pre-deployment controls.
  arXiv  Detail & Related papers  (2025-08-20T18:42:36Z)
• The Passwordless Authentication with Passkey Technology from an Implementation Perspective [0.5249805590164902]
  New authentication technologies have shifted from traditional password-based logins to passwordless security.<n>This paper highlights the key techniques used during the implementation of the authentication system with Passkey technology.
  arXiv  Detail & Related papers  (2025-08-16T06:17:59Z)
• Building a robust OAuth token based API Security: A High level Overview [0.0]
  This paper presents the fundamentals necessary for building a such a token-based API security system.<n>The intent is to equip developers with the foundational knowledge necessary to build secure, scalable token-based API security systems.
  arXiv  Detail & Related papers  (2025-07-22T06:14:14Z)
• A Novel Protocol Using Captive Portals for FIDO2 Network Authentication [45.84205238554709]
  We introduce FIDO2CAP: FIDO2 Captive-portal Authentication Protocol. We develop a prototype of FIDO2CAP authentication in a mock scenario. This work makes the first systematic approach for adapting network authentication to the new authentication paradigm relying on FIDO2 authentication.
  arXiv  Detail & Related papers  (2024-02-20T09:55:20Z)
• Performance-lossless Black-box Model Watermarking [69.22653003059031]
  We propose a branch backdoor-based model watermarking protocol to protect model intellectual property. In addition, we analyze the potential threats to the protocol and provide a secure and feasible watermarking instance for language models.
  arXiv  Detail & Related papers  (2023-12-11T16:14:04Z)
• A General Framework for Verification and Control of Dynamical Models via Certificate Synthesis [54.959571890098786]
  We provide a framework to encode system specifications and define corresponding certificates. We present an automated approach to formally synthesise controllers and certificates. Our approach contributes to the broad field of safe learning for control, exploiting the flexibility of neural networks.
  arXiv  Detail & Related papers  (2023-09-12T09:37:26Z)
• Secure access system using signature verification over tablet PC [62.21072852729544]
  We describe a highly versatile and scalable prototype for Web-based secure access using signature verification. The proposed architecture can be easily extended to work with different kinds of sensors and large-scale databases.
  arXiv  Detail & Related papers  (2023-01-11T11:05:47Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.