Fourth-factor authentication: Somebody you know

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2006, Pages 168-178

  Brainard, John ^a   Juels, Ari ^a   Rivest, Ronald L ^b   Szydlo, Michael ^a   Yung, Moti ^a  

^a RSA   (United States)

^b MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Authentication; Hardware tokens; Vouchers

Indexed keywords

COMPUTER SYSTEMS; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; PATTERN RECOGNITION; PUBLIC KEY CRYPTOGRAPHY; REQUIREMENTS ENGINEERING; USER INTERFACES;

HARDWARE TOKENS; HELP-DESK ASSISTANCE; VOUCHERS;

AUTHENTICATION;

EID: 34547363189     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1180405.1180427     Document Type: Conference Paper

References (17)

1. v-GO SSPR 5.0 product description. Referenced 2006 at www.passlogix.com.
2. Simple Distributed Security Infrastructure (SDSI) web page, 2001. Referenced 2006 at http://theory.lcs.mit.edu/~cis/sdsi.html.
3. PeopleSoft and Courion deliver integrated password management solution, 27 August 2001. Press release. Referenced 2006 at www.courion.com.
4. M. Blaze, J. Feigenbaum, and A. D. Keromytis. The KeyNote trust management system. In Security Protocols International Workshop, pages 59-63. Springer-Verlag, 1998. LNCS no. 1550.
5. M. Blaze, J. Feigenbaum, and M. Strauss. Compliance-checking in the PolicyMaker trust-management system. In Financial Cryptography, pages 251-265. Springer-Verlag, 1998. LNCS no. 1465.
6. W. Eazel. 'Live phishing experiment nets consumers hook, line, and sinker. SC Magazine, 8 November 2005. Referenced 2006 at www.scmagazine.com.
7. C. Ellison. UPnP security ceremonies design document: For UPnP device architecture 1.0, 3 October 2003. Referenced 2006 at http://www.upnp.org.
8. C. Ellison. IETF RFC 2692: SPKI requirements, September 1999.
9. V. Griffith and M. Jakobsson. Messin' with Texas: Deriving mothers maiden names using public records. In J. Ioannidis, A. D. Keromytis, and M. Yung, editors, Applied Cryptography and Network Security (ACNS), pages 91-103. Springer-Verlag, 2005. LNCS no. 3531.
10. RSA Security Inc. RSA SecurID authenticators, 2006. Product Specification. Referenced 2006 at www.rsasecurity.com.
11. J. Jubak. Globalization isn't what's killing GM. MSN Money, 29 November 2005. Referenced 2006 at moneycentral.msn.com.
12. D. V. Klein. Foiling the cracker: A survey of and improvements to, password security. In UNIX Security II: USENIX Workshop Proceedings, pages 5-14, Berkeley, CA, 1990.
13. J. Leyden. Office workers give away passwords for a cheap pen. The Register, 18 April 2003. Referenced 2006 at www.theregister.co.uk.
14. J. M. McCune, A. Perrig, and M. K. Reiter. Seeing-is-believing: Using camera phones for human-verifiable authentication. In IEEE Symposium on Security and Privacy, pages 110-124, 2005.
15. K. D. Mitnick and W. L. Simon. The Art of Deception: Controlling the Human Element of Security. Wiley, 2002.
16. T. Pullar-Strecker. NZ bank adds security online. Sidney Morning Herald, 8 November 2004. Referenced 2006 at www.smh.com.au.
17. B. Ross, C. Jackson, N. Miyake, D. Boneh, and J. Mitchell. Stronger password authentication using browser extensions. In P. McDaniel, editor, USENIX Security, pages 17-32, 2005.