With　the　development　of　Industry　4.0,　the　communication　of　smart　grid　has　recently　been　taken　seriously　to　ensure　secure　communication　between　operator　and　control　center.　However,　the　authentication　process　between　them　faces　many　challenges.　Once　the　attacker　successfully　authenticated　in　the　control　center,　the　privacy　data　in　the　smart　grid　may　leak　and　cause　irreparable　damage　to　the　user.　In　addition,　operator　authentication　is　one　of　the　most　basic　and　crucial　processes.　Therefore,　we　propose　the　eye-movement　and　iris　recognition　based　authentication　(EmIr-Auth),　a　novel　biometrics-based　remote　operator　authentication　scheme.　EmIr-Auth　uses　the　recorded　eye-movement　trajectory　and　randomly　selected　iris　image　to　authenticate　operators,　which　is　beneficial　in　that　it　is　able　to　get　rid　of　many　cryptographic　computations,　as　well　as　the　need　to　minimize　message　exchange.　Furthermore,　except　for　a　high-resolution　camera,　we　do　not　require　any　additional　biometric　sensors　in　this　scheme.　Using　the　Burrows-Abadi-Needham　logic,　in　this　article,　we　demonstrate　that　our　scheme　provides　secure　authentication.　Moreover,　we　analyze　the　attacks　that　EmIr-Auth　can　resist　by　informal　security　analysis.　Experimental　results　show　that　EmIr-Auth　is　efficient　enough　to　deploy　on　portable　devices　and　reduce　the　overhead　of　authentication　procedure.　©　2005-2012　IEEE.