Service management architecture and system capacity design for PhoneFactor™: a two-factor authentication service

Authors:
Haiyang Qian;Chandra Sekhar Surapaneni;Stephen Dispensa;Deep Medhi
Affiliations:
University of Missouri-Kansas City;PhoneFactor, Inc.;PhoneFactor, Inc.;University of Missouri-Kansas City
Venue:
IM'09 Proceedings of the 11th IFIP/IEEE international conference on Symposium on Integrated Network Management
Year:
2009

Citing 3
Cited 1

Wide area traffic: the failure of Poisson modeling

IEEE/ACM Transactions on Networking (TON)
Routing and Dimensioning in Circuit-Switched Networks

Routing and Dimensioning in Circuit-Switched Networks
Network Routing: Algorithms, Protocols, and Architectures

Network Routing: Algorithms, Protocols, and Architectures

SessionJuggler: secure web login from an untrusted terminal using session hijacking

Proceedings of the 21st international conference on World Wide Web

Quantified Score

Hi-index	0.00

Visualization

Abstract

PhoneFactor™ is a token-less two-factor authentication service for user remote logons [13]. This allows users of an organization to be authenticated through an automated phone call to the user's phone before access is allowed. In this paper, we present the service management architecture of PhoneFactor that depends on both the Internet and the public switched telephone network (PSTN), and we identify two key quality of service parameters, the system response time and call blocking probability, where the latter can impact the former. Furthermore, through traffic analysis of the measurement data from the deployed PhoneFactor service, we found that the inter-arrival time of requests follows the Generalized Pareto distribution while the system response time and the call duration (for the authentication part through the phone call) follow the log-normal distribution. Given these distributions, we then present system capacity design methodologies by comparing them to known results for systems that are analytically derivable.