H.R. 7269 NOT in Our Schools Act of 2022

Multifactor Authentication Approach on Internet of Things: Children’s Toys

Manal Alanazi – Majed Aborokbah

Faculty of Computers & Information Technology, University of Tabuk, Tabuk, Saudi Arabia

Abstract:  Internet connected Children’s toys are a type of IoT devices that the security community should pay particular attention. A cyber-predator may interact with or gather confidential data about children without being physically present if IoT toys are hacked. Authentication to verify user identity is essential for all internet-connected applications, where relying on single authentication is not considered safe, especially in children’s applications. Children often use easy-to-guess passwords in smart applications associated with the Internet of Things (IoT) for children’s toys. In this paper, we propose to activate multi-factor authentication on the IoTs for children’s toys connected to the internet using companion applications. When changing the user’s behaviour (by IP address, GPS, OS version, and browser), the child’s identity must be verified by two-factor authentication to prevent unauthorized access to preserve the child’s safety and privacy. This paper introduces multi-authentication mechanisms: a password and another authentication type, either mobile phone SMS, security token, digital certificate, or biometric authentication.

CLICK HERE to order complete paper.