Multifactor Authentication Approach on Internet of Things: Children's Toys

Internet connected Children's toys are a type of IoT devices that the security community should pay particular attention. A cyber-predator may interact with or gather confidential data about children without being physically present if IoT toys are hacked. Authentication to verify user identity is essential for all internet-connected applications, where relying on single authentication is not considered safe, especially in children's applications. Children often use easy-to-guess passwords in smart applications associated with the Internet of Things (IoT) for children's toys. In this paper, we propose to activate multi-factor authentication on the IoTs for children's toys connected to the internet using companion applications. When changing the user's behaviour (by IP address, GPS, OS version, and browser), the child's identity must be verified by two-factor authentication to prevent unauthorized access to preserve the child's safety and privacy. This paper introduces multi-authentication mechanisms: a password and another authentication type, either mobile phone SMS, security token, digital certificate, or biometric authentication.