ProtocolsThe Dual Factor AuthenticationMore specifically security protocolsS - U: NU → P : N,PINP → U : {N,PIN}xU → S: {N,PIN}xIN, PINIKN?**.."specify the steps thatprincipals use to establishtrust relationships"Where• S: server• P: password generatorThe Case of the Garage• U: User• K: encryption KTrust On First Use (TOFU)EXITEXITENTRANCESecurity module that handles• Trust software machineT → G : T, {T,N}KT• Software tries to find machine IDWhere• T: token (represented by serial number)No id then ask the user (e.g. Whatsapp, SmartTV ...)G: garage• N: "unique number"The Case of the Dual FactorPay PalaeAuthenticationRemote Key ManagementS - U: NU → P : N,PINP → U : {N,PIN}KU → S: {N,PIN}KKDC (A,B)KDCN?WhereAlice KA. KDC (R1, Кв.крс (А,R1))knows R1• S: server• P: password generator• U: UserKB-KDC (A,R1)Bob knows R1• K: encryption KWhen do Protocols Fail?Alice, Bob communicate using shared session key R1Remote Key Management(cont'd)User authentication is heavily based on aprotocol that uses a Password/PINUsing protocol notationEavesdropping• People looking over your shoulder• Fake login Webpage• Devices capturing keystrokes- Man-in-the-middle attackA → S: A,BS → A : {A,B, KAB, T}KAs' {A, B, Kab, T}KpsA → B : {A,B, KAB, T}Kps+ {M}KaBThe Challenge-Response• Where T represents the timestampProtocolNeedham-Schroeder protocolE → T: N10:24Aud M- Today 10 24 AM4th St, San Francisco, CAT → E : T, {T,N}KMessage 1 A → S: A,B,NAMessage 2 S → A : {N4,B,KAB, {KAB,A}kpg }K¼sMessage 3 A — В: (КАВ-А}крswhere• E is the engine controller• Tis the transponderK is the encryption keyMessage 4 B → A : {Ng}KN random challengeMessage 5 A → B : {Ng- 1}KBIn PracticeKerberosUser is givenaccess to thesystemExitEnterJUser wants to enterthe systemUser is presentedwith a challengeUser attempts the YeschallengeDeveloped by MIT• Network authentication toolNoA → S : A,BS → A : {Ts,L, KAB, B, {Ts, L, KAB,A}Kps }KasA → B : {Ts,L, KAB, A}Kns+ {A, TA}K,aBB → A : {TA+1}K,Bsurce: https://www.geeksforgeeks.org/challenge-response-authentication-mechanism-cram/Challenge Response AuthenticationMechanism (CRAM)- Completely Automated Public Turing TestLoginExample: Microsoft ActiveDirectory- Biometric For instance, we studied how a dual-factor authentication works when a password generator is used:S → U : NU → P : N,PINP → U : {N,PIN}xU → S: {N,PIN}KCan you modify the set of rules outlined above to describe the protocol of dual-factor authentication when a mobiledevice is involved?please submit1. a high-level overview of how the protocol would work2. the description of the protocol using the formal notation

Question

ProtocolsThe Dual Factor AuthenticationMore specifically security protocolsS - U: NU → P : N,PINP → U : {N,PIN}xU → S: {N,PIN}xIN, PINIKN?**..&#34;specify the steps thatprincipals use to establishtrust relationships&#34;Where• S: server• P: password generatorThe Case of the Garage• U: User• K: encryption KTrust On First Use (TOFU)EXITEXITENTRANCESecurity module that handles• Trust software machineT → G : T, {T,N}KT• Software tries to find machine IDWhere• T: token (represented by serial number)No id then ask the user (e.g. Whatsapp, SmartTV ...)G: garage• N: &#34;unique number&#34;The Case of the Dual FactorPay PalaeAuthenticationRemote Key ManagementS - U: NU → P : N,PINP → U : {N,PIN}KU → S: {N,PIN}KKDC (A,B)KDCN?WhereAlice KA. KDC (R1, Кв.крс (А,R1))knows R1• S: server• P: password generator• U: UserKB-KDC (A,R1)Bob knows R1• K: encryption KWhen do Protocols Fail?Alice, Bob communicate using shared session key R1Remote Key Management(cont'd)User authentication is heavily based on aprotocol that uses a Password/PINUsing protocol notationEavesdropping• People looking over your shoulder• Fake login Webpage• Devices capturing keystrokes- Man-in-the-middle attackA → S: A,BS → A : {A,B, KAB, T}KAs' {A, B, Kab, T}KpsA → B : {A,B, KAB, T}Kps+ {M}KaBThe Challenge-Response• Where T represents the timestampProtocolNeedham-Schroeder protocolE → T: N10:24Aud M- Today 10 24 AM4th St, San Francisco, CAT → E : T, {T,N}KMessage 1 A → S: A,B,NAMessage 2 S → A : {N4,B,KAB, {KAB,A}kpg }K¼sMessage 3 A — В: (КАВ-А}крswhere• E is the engine controller• Tis the transponderK is the encryption keyMessage 4 B → A : {Ng}KN random challengeMessage 5 A → B : {Ng- 1}KBIn PracticeKerberosUser is givenaccess to thesystemExitEnterJUser wants to enterthe systemUser is presentedwith a challengeUser attempts the YeschallengeDeveloped by MIT• Network authentication toolNoA → S : A,BS → A : {Ts,L, KAB, B, {Ts, L, KAB,A}Kps }KasA → B : {Ts,L, KAB, A}Kns+ {A, TA}K,aBB → A : {TA+1}K,Bsurce: https://www.geeksforgeeks.org/challenge-response-authentication-mechanism-cram/Challenge Response AuthenticationMechanism (CRAM)- Completely Automated Public Turing TestLoginExample: Microsoft ActiveDirectory- Biometric For instance, we studied how a dual-factor authentication works when a password generator is used:S → U : NU → P : N,PINP → U : {N,PIN}xU → S: {N,PIN}KCan you modify the set of rules outlined above to describe the protocol of dual-factor authentication when a mobiledevice is involved?please submit1. a high-level overview of how the protocol would work2. the description of the protocol using the formal notation

Accepted Answer

Dual-factor authentication:

Two-factor authentication (2FA), at times alluded to as two-step check…