UC-Secure Multi-Factor Authentication With Dynamic Password Recovery and Fine-Grained Access Control

This paper introduces MFA-DPRF, a new multi-factor authentication (MFA, a security method requiring multiple forms of proof like a password and a code) scheme designed to handle two problems that existing systems ignore: password recovery when users forget their login credentials, and fine-grained access control (letting administrators set specific rules about which users can access which resources). The system works by requiring users to provide both a valid password and attributes that match an access policy, and it includes a dynamic password recovery method using secret questions and secret sharing (splitting a secret into pieces so no single piece reveals the secret).