Assessing Robustness and Resistance to Attacks of an Authentication System Based on OpenID Connect Protocol and Ethereum Blockchain

Abstract

In this paper, we assess the robustness and resistance against various types of attacks of a multi-factor authentication mechanism that we have proposed. It is a mechanism based on the OpenID Connect protocol and utilizes the Ethereum blockchain. Robustness was evaluated by conducting appropriate security tests using AVISPA and Scyther protocol security verification tools. The analysis of the test results confirms that our proposed authentication mechanism provides effective resistance against replay attacks, identity spoofing attacks, counterfeit token fabrication attacks, Broken End-User Authentication attacks, and man-in-the-middle attacks. We also evaluated performance in terms of gas cost in Ether consumed during different transactions as well as their execution times.