<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01470505</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T07:17:00+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Extended HTTP Digest Access Authentication</title>
            <author role="aut">
              <persName>
                <forename type="first">Henning</forename>
                <surname>Klevjer</surname>
              </persName>
              <email type="md5">fc59d55edaaf182a26b684a705801c72</email>
              <email type="domain">ifi.uio.no</email>
              <idno type="idhal" notation="numeric">1001823</idno>
              <idno type="halauthorid" notation="string">884077-1001823</idno>
              <affiliation ref="#struct-50791"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Kent</forename>
                <forename type="middle">Are</forename>
                <surname>Varmedal</surname>
              </persName>
              <email type="md5">127081395de2472fca170f699a2b05c9</email>
              <email type="domain">ifi.uio.no</email>
              <idno type="idhal" notation="numeric">1001824</idno>
              <idno type="halauthorid" notation="string">1135410-1001824</idno>
              <affiliation ref="#struct-50791"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Audun</forename>
                <surname>Jøsang</surname>
              </persName>
              <email type="md5">0f9fc94f53308cffcb78373897f28449</email>
              <email type="domain">ifi.uio.no</email>
              <idno type="idhal" notation="numeric">983840</idno>
              <idno type="halauthorid" notation="string">852056-983840</idno>
              <affiliation ref="#struct-50791"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-02-17 14:48:57</date>
              <date type="whenModified">2023-10-19 14:22:31</date>
              <date type="whenReleased">2017-02-17 15:16:30</date>
              <date type="whenProduced">2013-04-08</date>
              <date type="whenEndEmbargoed">2016-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01470505v1/document">
                <date notBefore="2016-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01470505v1/file/978-3-642-37282-7_7_Chapter.pdf" id="file-1470505-1539093">
                <date notBefore="2016-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-37282-7_7.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01470505</idno>
            <idno type="halUri">https://inria.hal.science/hal-01470505</idno>
            <idno type="halBibtex">klevjer:hal-01470505</idno>
            <idno type="halRefHtml">&lt;i&gt;3rd Policies and Research in Identity Management (IDMAN)&lt;/i&gt;, Apr 2013, London, United Kingdom. pp.83-96, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-37282-7_7"&gt;&amp;#x27E8;10.1007/978-3-642-37282-7_7&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">3rd Policies and Research in Identity Management (IDMAN), Apr 2013, London, United Kingdom. pp.83-96, &amp;#x27E8;10.1007/978-3-642-37282-7_7&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1470505-1539093"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-WG" corresp="IFIP">Working Groups</idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-WG11-6" corresp="IFIP-WG">IFIP WG 11.6: Identity Management</idno>
            <idno type="stamp" n="IFIP-AICT-396" corresp="IFIP-AICT">Policies and Research in Identity Management</idno>
            <idno type="stamp" n="IFIP-IDMAN">Policies and Research in Identity Management</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 4: Session 3 - Authentication and Access Control</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Extended HTTP Digest Access Authentication</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Henning</forename>
                    <surname>Klevjer</surname>
                  </persName>
                  <email type="md5">fc59d55edaaf182a26b684a705801c72</email>
                  <email type="domain">ifi.uio.no</email>
                  <idno type="idhal" notation="numeric">1001823</idno>
                  <idno type="halauthorid" notation="string">884077-1001823</idno>
                  <affiliation ref="#struct-50791"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Kent</forename>
                    <forename type="middle">Are</forename>
                    <surname>Varmedal</surname>
                  </persName>
                  <email type="md5">127081395de2472fca170f699a2b05c9</email>
                  <email type="domain">ifi.uio.no</email>
                  <idno type="idhal" notation="numeric">1001824</idno>
                  <idno type="halauthorid" notation="string">1135410-1001824</idno>
                  <affiliation ref="#struct-50791"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Audun</forename>
                    <surname>Jøsang</surname>
                  </persName>
                  <email type="md5">0f9fc94f53308cffcb78373897f28449</email>
                  <email type="domain">ifi.uio.no</email>
                  <idno type="idhal" notation="numeric">983840</idno>
                  <idno type="halauthorid" notation="string">852056-983840</idno>
                  <affiliation ref="#struct-50791"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>3rd Policies and Research in Identity Management (IDMAN)</title>
                  <date type="start">2013-04-08</date>
                  <date type="end">2013-04-09</date>
                  <settlement>London</settlement>
                  <country key="GB">United Kingdom</country>
                </meeting>
                <editor>Simone Fischer-Hübner</editor>
                <editor>Elisabeth Leeuw</editor>
                <editor>Chris Mitchell</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Policies and Research in Identity Management</biblScope>
                  <biblScope unit="volume">AICT-396</biblScope>
                  <biblScope unit="pp">83-96</biblScope>
                  <date type="datePub">2013</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-37282-7_7</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>User authentication to a server is typically done by presenting a username and a password in some protected form to the server, and having the server verify that those credentials correspond to an identity previously registered and authorized for access. It is crucial that attackers never get access to operational passwords, which typically is achieved by encryption in transit, or through a challenge-response protocol between the client and server computer platforms. However, these mechanisms do not protect passwords at the moment when they are entered into the client computer, which leaves the password exposed to attacks by malware on the client. We present a method for protecting passwords from being exposed on client platforms. The method is an extension of the well-known HTTP Digest Access Authentication which is a challenge-response protocol specified as part of HTTP. The method relies on an external mostly offline personal authentication device called OffPAD which communicates with the client platform. We show how the presented authentication scheme increases security as well as enhances usability with regard to identity management. In addition to describing the OffPAD device, we argue that the HTTP Digest Access Authentication standard does not conform to today’s best practices, and suggest improvements.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
              <org type="consortium">WG 11.6</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-50791" status="VALID">
          <idno type="IdRef">028101138</idno>
          <idno type="ROR">https://ror.org/01xtthb56</idno>
          <orgName>University of Oslo</orgName>
          <orgName type="acronym">UiO</orgName>
          <desc>
            <address>
              <addrLine>P.O 1072 Blindern 0316 Oslo</addrLine>
              <country key="NO"/>
            </address>
            <ref type="url">http://www.uio.no/english/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>