{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,20]],"date-time":"2026-08-20T12:24:20Z","timestamp":1787228660103,"version":"build-2736575974"},"reference-count":31,"publisher":"Springer Science and Business Media LLC","issue":"7","license":[{"start":{"date-parts":[[2026,8,20]],"date-time":"2026-08-20T00:00:00Z","timestamp":1787184000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2026,8,20]],"date-time":"2026-08-20T00:00:00Z","timestamp":1787184000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J. King Saud Univ. Comput. Inf. Sci."],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1007\/s44443-026-01001-0","type":"journal-article","created":{"date-parts":[[2026,8,20]],"date-time":"2026-08-20T11:28:12Z","timestamp":1787225292000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A deployment-aware multi-node FIDO2\/WebAuthn authentication architecture for maritime information systems"],"prefix":"10.1007","volume":"38","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5552-3517","authenticated-orcid":false,"given":"Zhen-Yu","family":"Wu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Cheng-Yu","family":"Ku","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,8,20]]},"reference":[{"key":"1001_CR1","doi-asserted-by":"publisher","unstructured":"Alqurashi, F. S., Trichili, A., Saeed, N., Ooi, B. S., & Alouini, M. S., \u201cMulti-factor authentication: A survey,\u201d Cryptography, 2(1). https:\/\/doi.org\/10.3390\/cryptography2010001","DOI":"10.3390\/cryptography2010001"},{"key":"1001_CR2","doi-asserted-by":"publisher","unstructured":"Alqurashi, F. S., Trichili, A., Saeed, N., Ooi, B. S., & Alouini, M. S., \u201cMaritime Communications: A Survey on Enabling Technologies, Opportunities, and Challenges,\u201d arXiv preprint arXiv:2204.12824, 2022, https:\/\/doi.org\/10.48550\/arXiv.2204.12824.","DOI":"10.48550\/arXiv.2204.12824"},{"key":"1001_CR3","doi-asserted-by":"publisher","unstructured":"Bicakci, K., Varli, F. M., Korkmaz, M. E., & Uzunay, Y, (2026) \u201cQES-backed virtual FIDO2 authenticators: Architectural options for secure, synchronizable WebAuthn credentials,\u201d arXiv preprint arXiv:2601.06554, https:\/\/doi.org\/10.48550\/arXiv.2601.06554","DOI":"10.48550\/arXiv.2601.06554"},{"key":"1001_CR4","unstructured":"BIMCO, ICS, INTERCARGO, INTERTANKO, INTERMANAGER, and other industry organizations (2024) The Guidelines on Cyber Security Onboard Ships,\u201d Version 5, Nov. 2024. [Online]. Available: https:\/\/www.maritimeglobalsecurity.org\/media\/g3qlxdaw\/2024-11-14-guidelines_on_cyber_security-v5-final.pdf. Accessed 21 June 2026"},{"key":"1001_CR5","doi-asserted-by":"publisher","unstructured":"Bindel, N., Cremers, C., & Zhao, M, (2023) \u201cFIDO2, CTAP 2.1, and WebAuthn 2: Provable security and post-quantum instantiation,\u201d in Proceedings of the IEEE Symposium on Security and Privacy, 1471\u20131490, https:\/\/doi.org\/10.1109\/SP46215.2023.10179454","DOI":"10.1109\/SP46215.2023.10179454"},{"key":"1001_CR6","doi-asserted-by":"publisher","unstructured":"Bonneau, J., Herley, C., Van Oorschot, P. C., & Stajano, F, (2012) \u201cThe quest to replace passwords: A framework for comparative evaluation of web authentication schemes,\u201d in Proceedings of the IEEE Symposium on Security and Privacy. 553\u2013567, https:\/\/doi.org\/10.1109\/SP.2012.44","DOI":"10.1109\/SP.2012.44"},{"key":"1001_CR7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23357","author":"A Das","year":"2014","unstructured":"Das A, Bonneau J, Caesar M, Borisov N, Wang X (2014) The tangled web of password reuse. Proceedings of the Network and Distributed System Security Symposium (NDSS). https:\/\/doi.org\/10.14722\/ndss.2014.23357","journal-title":"Proceedings of the Network and Distributed System Security Symposium (NDSS)"},{"key":"1001_CR8","unstructured":"FIDO Alliance (2018) FIDO technical overview, FIDO Alliance, 2018. [Online]. Available: https:\/\/fidoalliance.org\/specs\/fido-v2.0-ps-20180227\/fido-overview-v2.0-ps-20180227.html. Accessed 21 June 2026"},{"key":"1001_CR9","unstructured":"FIDO Alliance (2019) FIDO2: Moving the world beyond passwords, 2019. [Online]. Available: https:\/\/fidoalliance.org\/fido2. Accessed 21 June 2026"},{"key":"1001_CR10","unstructured":"FIDO Alliance (2022) White paper: Multi-device FIDO credentials, Mar. 17, 2022. [Online]. Available: https:\/\/fidoalliance.org\/white-paper-multi-device-fido-credentials. Accessed 21 June 2026"},{"key":"1001_CR11","doi-asserted-by":"publisher","DOI":"10.1007\/b97644","volume-title":"Guide to elliptic curve cryptography","author":"D Hankerson","year":"2004","unstructured":"Hankerson D, Menezes A, Vanstone S (2004) Guide to elliptic curve cryptography. Springer, New York, NY, USA. https:\/\/doi.org\/10.1007\/b97644"},{"key":"1001_CR12","unstructured":"International Maritime Organization (2025) Guidelines on maritime cyber risk management, MSC-FAL.1\/Circ.3\/Rev.3, London, U.K., Apr. 4, 2025. [Online]. Available: https:\/\/wwwcdn.imo.org\/localresources\/en\/OurWork\/Security\/Documents\/MSC-FAL.1-Circ.3-Rev.3.pdf. Accessed 21 June 2026"},{"key":"1001_CR13","unstructured":"International Maritime Organization (2026) Maritime cyber risk management. [Online]. Available: https:\/\/www.imo.org\/en\/OurWork\/Security\/Pages\/Cyber-security.aspx. Accessed 21 June 2026"},{"key":"1001_CR14","unstructured":"ISO\/IEC (2022) Information security, cybersecurity and privacy protection \u2014 Information security management systems \u2014 Requirements, ISO\/IEC 27001:2022, International Organization for Standardization, Geneva, Switzerland"},{"key":"1001_CR15","doi-asserted-by":"publisher","DOI":"10.17487\/RFC7519","author":"M Jones","year":"2015","unstructured":"Jones M, Bradley J, Sakimura N (2015) \u201cJSON Web Token (JWT)\u201d, RFC 7519. Internet Engineering Task Force. https:\/\/doi.org\/10.17487\/RFC7519","journal-title":"Internet Engineering Task Force"},{"key":"1001_CR16","unstructured":"Kale M (2026) SimpleWebAuthn: WebAuthn for Node.js, GitHub repository. [Online]. Available: https:\/\/github.com\/MasterKale\/SimpleWebAuthn. Accessed 21 June 2026"},{"key":"1001_CR17","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-92","author":"K Kent","year":"2006","unstructured":"Kent K, Souppaya M (2006) \u201cGuide to Computer Security Log Management\u201d, NIST Special Publication 800\u201392, National Institute of Standards and Technology, Gaithersburg, MD. USA. https:\/\/doi.org\/10.6028\/NIST.SP.800-92","journal-title":"USA"},{"key":"1001_CR18","unstructured":"Lassak L, Lindemann N, Kowalewski M (2025) From TOTPs to security keys: studying the reality of passwordless fido2 authentication with pin and biometrics in a corporate environment. In Proceedings of the Twenty-First Symposium on Usable Privacy and Security (SOUPS 2025), pp 371\u2013389, USENIX Association, Seattle, WA, USA. Available at: https:\/\/www.usenix.org\/conference\/soups2025\/presentation\/lassak"},{"key":"1001_CR19","unstructured":"Microsoft (2025) Microsoft digital defense report 2025, Microsoft Security, 2025. [Online]. Available: https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/cybersecurity\/microsoft-digital-defense-report-2025.\u00a0Accessed 21 June 2026"},{"key":"1001_CR20","doi-asserted-by":"publisher","unstructured":"Miller VS (1986) \u201cUse of elliptic curves in cryptography.\u201d Advances in Cryptology\u2014CRYPTO \u201985, vol vol. 218. Springer, Berlin, Germany, pp 417\u2013426. https:\/\/doi.org\/10.1007\/3-540-39799-X_31","DOI":"10.1007\/3-540-39799-X_31"},{"key":"1001_CR21","unstructured":"Moller\u2013Maersk AP (2017) Cyber attack update, Jun. 28, 2017. [Online]. Available: https:\/\/investor.maersk.com\/news-releases\/news-release-details\/cyber-attack-update.\u00a0Accessed 21 June 2026"},{"key":"1001_CR22","unstructured":"Mozilla Developer Network (2026) Web Authentication API, MDN Web Docs. [Online]. Available: https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Web_Authentication_API. Accessed 21 June 2026"},{"key":"1001_CR23","unstructured":"OWASP Foundation (2026) Authentication Cheat Sheet, OWASP Cheat Sheet Series. [Online]. Available: https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/Authentication_Cheat_Sheet.html. Accessed 21 June 2026"},{"key":"1001_CR24","unstructured":"Reuters (2018) Port of San Diego hit by ransomware attack, Sep. 27, 2018. [Online]. Available: https:\/\/www.reuters.com\/article\/us-california-cyber-port-san-diego-idUSKCN1M72W1.\u00a0Accessed 21 June 2026"},{"issue":"9","key":"1001_CR25","doi-asserted-by":"publisher","first-page":"3610","DOI":"10.3390\/app14093610","volume":"14","author":"M Rivera-Dourado","year":"2024","unstructured":"Rivera-Dourado M, Gestal M, Pazos A, V\u00e1zquez-Naya J (2024) A novel protocol using captive portals for FIDO2 network authentication. Applied Sciences 14(9):3610. https:\/\/doi.org\/10.3390\/app14093610","journal-title":"Applied Sciences"},{"key":"1001_CR26","doi-asserted-by":"publisher","unstructured":"Rivera-Dourado, M., Xenakis, C., Pazos, A., & V\u00e1zquez-Naya, J., \u201cEAP-FIDO: A novel EAP method for using FIDO2 credentials for network authentication,\u201d Computer Networks, 266(111348). https:\/\/doi.org\/10.1016\/j.comnet.2025.111348","DOI":"10.1016\/j.comnet.2025.111348"},{"key":"1001_CR27","unstructured":"Srinivas S, Balfanz D, Tiffany E, Czeskis A, Alliance F (2015) Universal 2nd factor (U2F): Improving security and usability,\u201d Google Security Blog, 2015. [Online]. Available: https:\/\/research.google\/pubs\/pub45409. Accessed 21 June 2026"},{"key":"1001_CR28","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-63B-4","author":"D Temoshok","year":"2025","unstructured":"Temoshok D, Fenton J, Choong Y-Y, Lefkovitz N, Regenscheid A, Galluzzo R, Richer J (2025) \u201cDigital Identity Guidelines: Authentication and Authenticator Management\u201d, NIST Special Publication 800\u201363B-4, National Institute of Standards and Technology, Gaithersburg, MD. USA. https:\/\/doi.org\/10.6028\/NIST.SP.800-63B-4","journal-title":"USA"},{"key":"1001_CR29","unstructured":"W3C (2026) Web Authentication: An API for accessing Public Key Credentials Level 3, W3C Candidate Recommendation Snapshot, May 26, 2026. [Online]. Available: https:\/\/www.w3.org\/TR\/webauthn-3.\u00a0Accessed 21 June 2026"},{"key":"1001_CR30","doi-asserted-by":"publisher","unstructured":"Wagner, P., Heid, K., and Heider, J,. (2021) \u201cRemote WebAuthn: FIDO2 authentication for less accessible devices,\u201d in Proceedings of the 18th International Conference on Security and Cryptography (SECRYPT), 2021, pp. 368\u2013375, https:\/\/doi.org\/10.5220\/0010192703680375.","DOI":"10.5220\/0010192703680375"},{"key":"1001_CR31","unstructured":"Yubico (2026) WebAuthn developer guide. [Online]. Available: https:\/\/developers.yubico.com\/WebAuthn\/WebAuthn_Developer_Guide\/. Accessed 21 June 2026"}],"container-title":["Journal of King Saud University Computer and Information Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s44443-026-01001-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s44443-026-01001-0","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s44443-026-01001-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,20]],"date-time":"2026-08-20T11:28:18Z","timestamp":1787225298000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s44443-026-01001-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,20]]},"references-count":31,"journal-issue":{"issue":"7","published-print":{"date-parts":[[2026,9]]}},"alternative-id":["1001"],"URL":"https:\/\/doi.org\/10.1007\/s44443-026-01001-0","relation":{},"ISSN":["1319-1578","2213-1248"],"issn-type":[{"value":"1319-1578","type":"print"},{"value":"2213-1248","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8,20]]},"assertion":[{"value":"12 May 2026","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"25 June 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 August 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"Not applicable.","order":1,"name":"Ethics","label":"Ethical approval","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","label":"Competing interests","group":{"name":"EthicsHeading","label":"Declarations"}}],"article-number":"713"}}