Modern infocommunication systems still rely mainly on static authentication methods such as passwords, PINs, and hardware tokens. Although these mechanisms are simple and widely used, they are vulnerable to brute-force attacks, phishing, credential stuffing, shoulder surfing, and credential theft. Once valid credentials are compromised, the system usually cannot verify whether the active user is legitimate, which creates a serious security gap in cloud-based and distributed environments.
