Integration of OpenID Connect with FIDO UAF for Android environments
Ενσωμάτωση του πρωτοκόλλου OpenID Connect με το πρωτόκολλο FIDO UAF με σκοπό την κατασκευή ενός συστήματος ασφαλείας για περιβάλλοντα τύπου Android

Master Thesis
Author
Μακροπόδης, Ιωάννης
Makropodis, Ioannis
Date
2021-12-20Advisor
Ξενάκης, ΧρήστοςXenakis, Christos
View/ Open
Keywords
Open-ID ; FIDO UAF ; Keycloak ; Android ; Authentication ; Authorisation ; Biometric ; OAuth2.0 ; Web services ; Open sourceAbstract
Single Sign-On with OpenID Connect is a widely adopted delegated authentication
protocol. It is a layer above OAuth 2.0 which provides delegated authorization. This
protocol framework allows users to connect to several Service Providers with their
accounts, identified from a single Identity provider. Recently, more and more reports
are being made about the inadequacy of username and password authentication scheme,
with literature demonstrating the FIDO protocol as the most appropriate solution to
address this problem. The FIDO is a new authentication mechanism that replaces
passwords, simplifying the process of new user authentication. In this master thesis, we
will describe how these two protocols can be combined in order to build a pilot Identity
management framework that provides both strong authentication and strong
authorization. Our main concern is that users can use a mobile phone with biometric
authentication to access the web service of their choice.