  This paper presents a comprehensive investigation of authentication schemes
for smart mobile devices. We start by providing an overview of existing survey
articles published in the recent years that deal with security for mobile
devices. Then, we describe and give a classification of threat models in smart
mobile devices in five categories, including, identity-based attacks,
eavesdropping-based attacks, combined eavesdropping and identity-based attacks,
manipulation-based attacks, and service-based attacks. We also provide a
classification of countermeasures into four types of categories, including,
cryptographic functions, personal identification, classification algorithms,
and channel characteristics. According to these, we categorize authentication
schemes for smart mobile devices in four categories, namely, 1) biometric-based
authentication schemes, 2) channel-based authentication schemes, 3)
factor-based authentication schemes, and 4) ID-based authentication schemes. In
addition, we provide a taxonomy and comparison of authentication schemes for
smart mobile devices in the form of tables. Finally, we identify open
challenges and future research directions.
