Demonstration of Innovative Trusted TLS-IM Multi-Factor Authentication Token

This demonstration presents an innovative trusted multi-factor authentication (MFA) token, performing client authentication for TLS1.3 session used with pre-shared-key (TLS-PSK). This original token is built with a javacard and a micro-controller; the user interface comprises two push buttons and a LED. The microcontroller is identified by PUF features; its firmware integrity is verified by an attestation algorithm. The javacard application can be authenticated, and an internal TLS-PSK channel is available for its secure administration.

I. Introduction

Multiform factors authentication (MFA) is a technique widely used in digital systems for user's authentication. It relies on credentials [1] for example bound to something that a user knows (PIN code), something that a user possesses (electronic token), something that a user does (press button). Many MFA tokens are made with microcontrollers providing USB connectivity; when high security level is required they use secure elements (such as smartcards) that store secrets and compute cryptographic procedures.