Enhancing CardSpace Authentication Using a Mobile Device - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2011

Enhancing CardSpace Authentication Using a Mobile Device

Abstract

In this paper we propose a simple, novel scheme for using a mobile device to enhance CardSpace authentication. During the process of user authentication on a PC using CardSpace, a random and short-lived one-time password is sent to the user’s mobile device; this must then be entered into the PC by the user when prompted. The scheme does not require any changes to login servers, the CardSpace identity selector, or to the mobile device itself. We specify the scheme and give details of a proof-of-concept prototype. Security and operational analyses are also provided.
Fichier principal
Vignette du fichier
978-3-642-22348-8_16_Chapter.pdf (262.33 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01586573 , version 1 (13-09-2017)

Licence

Attribution

Identifiers

Cite

Haitham S. Al-Sinani, Chris J. Mitchell. Enhancing CardSpace Authentication Using a Mobile Device. 23th Data and Applications Security (DBSec), Jul 2011, Richmond, VA, United States. pp.201-216, ⟨10.1007/978-3-642-22348-8_16⟩. ⟨hal-01586573⟩
40 View
82 Download

Altmetric

Share

Gmail Facebook X LinkedIn More