2-clickAuth - Optical challenge-response authentication

ARES 2010 - 5th International Conference on Availability, Reliability, and Security

Volumn , Issue , 2010, Pages 79-86

  Vapen, Anna ^a   Byers, David ^a   Shahmehri, Nahid ^a  

^a LINKÖPING UNIVERSITY   (Sweden)

Author keywords

Authentication; Federated identity management; OpenID; QR code; Trusted device

Indexed keywords

CAMERA PHONE; CHALLENGE RESPONSE; EASE-OF-USE; FACEBOOK; FEDERATED IDENTITY; INTERNET USERS; LARGE AMOUNTS OF DATA; MALWARES; OPENID; QR CODES; SECURE AUTHENTICATION METHODS; SHORT PERIODS; SOURCEFORGE; WEB CAMERA;

CAMERAS; COMPUTER CRIME; SOCIAL NETWORKING (ONLINE); TELEPHONE SETS; WORLD WIDE WEB;

AUTHENTICATION;

EID: 77952418081     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2010.85     Document Type: Conference Paper

References (22)

1. J. Yan, A. Blackwell, R. Anderson and A. Grant. "Password memorability and security: Empirical results". IEEE Security and Privacy, vol. 2, no. 5, 25-31, 2004.
2. S. Shim, G. Bhalla, and V. Pendyala, "Federated Identity Management", Computer, vol. 38, no. 12, 2005.
3. OpenID Foundation, "Get an OpenID". [Online]. Available: http://openid.net/get-an-openid [Accessed: Sept 16, 2009]
4. L. Drebes, "Relying Party Stats as of Jan 1st, 2009" [Online] Available: http://blog.janrain.com/2009/01/relying-party-stats-as-of-jan-1st- 2008.html [Assecced: Sept 25, 2009]
5. "Bluetooth.com" [Online]. Available: http://www.bluetooth.com [Accessed: Sept 16, 2009]
6. H. Krawczyk, M. Bellare, and R. Canetti, "HMAC: Keyed-Hashing for Message Authentication," RFC 2104, Feb. 1997. [Online]. Available: http://www.ietf.org/rfc/rfc2104.txt
7. D. M'Raihi, M. Bellare, F. Hoornaert, D. Naccache, and O. Ranen, "HOTP: An HMAC-Based One-Time Password Algorithm", RFC 4226, Dec. 2005. [Online]. Available: http://www.ietf.org/rfc/rfc4226.txt
8. C. Glenn and R. Madson, "The Use of HMAC-SHA-1-96 within ESP and AH", RFC 2404, Nov. 1998. [Online]. Available: http://www.ietf.org/rfc/ rfc2404.txt
9. D. Eastlake, "HMAC SHA TSIG Algorithm Identifiers", RFC 4635, Aug. 2006. [Online]. Available: http://www.ietf.org/rfc/rfc4635.txt
10. "IRDA", Infrared Data Association. [Online]. Available: http://www.irda.org [Accessed: Sept 21, 2009]
11. "NFC Forum" [Online]. Available: http://www.nfc-forum.org [Accessed: Sept 6, 2009]
12. A. Bose, K. G. Shin. "On Mobile Viruses Exploiting Messaging and Bluetooth Services," in Securecomm and Workshops, Baltimore, 2006, pp. 1-10.
13. "GS1" [Online]. Available: http://www.gs1.org/barcodes [Accessed: Sept 21, 2009]
14. Denso Wave Inc, "QR Code.com". [Online]. Available: http://www.denso-wave.com/qrcode/index-e.html [Accessed: Sept 16, 2009]
15. Optical Challenge-Response. [Online]. Available: http://www.ida.liu.se/ divisions/adit/authentication [Accessed: Dec 8, 2009]
16. Google Code, "ZXing". [Online]. Available: http://code.google. com/p/zxing/ [Accessed: Sept 21, 2009]
17. Google Code, "Joid". [Online]. Available: http://code.google. com/p/joid/ [Accessed: Sept 21, 2009]
18. M. Wu, S. Garfinkel, and R. Miller, "Secure Web Authentication with Mobile Phones," in DIMACS Workshop on Usable Privacy and Security Software, 2004.
19. D. van Thanh, T. Jonvik, B. Feng, D. van Thuan, and I. Jorstad, "Simple Strong Authentication for Internet Applications Using Mobile Phones", in Global Telecommunications Conference (IEEE GLOBECOM), New Orleans, 2008.
20. M. Burnside et al., "The Untrusted Computer Problem and Camera-Based Authentication," in Pervasive Computing, LNCS, vol. 2414, pp. 114-124, 2002.
21. G. Starnberger, L. Froihofer, and K. M. Goeschka, "QR-TAN: Secure Mobile Transaction Authentication," in Fourth International Workshop on Frontiers in Availability, Reliability and Security (FARES 2009), Fukuoka, 2009, pp. 578-583.
22. Vidoop LLC. "Vidoop - Strong Authentication for the Consumer Web". [Online]. Available: http://vidoop.com/ [Accessed: Sept 21, 2009]