"Multilevel Authentication System with Dynamic Double Index on Secure Hardware: A New Paradigm for Defense-in-Depth of Digital Identity"
Marino, Giuseppe Antonio · Zenodo (CERN European Organization for Nuclear Research) · 2025
This document introduces a new multilayer authentication system, called the Dynamic Double-Index Authentication System (DDIAS). The system is designed to overcome the inherent vulnerabilities of traditional static and two-factor authentication architectures, providing defense-in-depth against brute-force attacks, replay attempts, and partial compromise. The solution integrates two progressive cryptographic indices—a Primary Index P(n)P(n) and a Secondary Index a(n)a(n)—generated within a secure hardware component (Secure Element). The architecture implements a sequential verification process that validates a unique pair (P(n),a(n))(P(n), a(n)) at each authentication level. This paper describes the conceptual architecture, operational flow, security analysis, and implementation feasibility, highlighting its potential applications in high-risk contexts such as digital government identity, finance, and the protection of critical infrastructures.