A new architecture for user authentication and key exchange using password for federated enterprises

IFIP Advances in Information and Communication Technology

Volumn 181, Issue , 2005, Pages 95-111

  Yang, Yanjiang ^a,b   Bao, Feng ^a   Deng, Robert H ^b  

^a INSTITUTE FOR INFOCOMM RESEARCH   (Singapore)

^b SINGAPORE MANAGEMENT UNIVERSITY   (Singapore)

Author keywords

Dictionary attack; Federated enterprise; Key exchange; Password authentication; Public key cryptosystem

Indexed keywords

COMPUTER CRIME; INTERNET PROTOCOLS; NETWORK ARCHITECTURE; PUBLIC KEY CRYPTOGRAPHY; UBIQUITOUS COMPUTING; SECURITY OF DATA;

DICTIONARY ATTACK; EFFICIENT AUTHENTICATION; KEY EXCHANGE; OFF-LINE DICTIONARY ATTACKS; PASSWORD AUTHENTICATION; PUBLIC KEY CRYPTOSYSTEMS; SPECIAL STRUCTURE; USER AUTHENTICATION;

AUTHENTICATION;

EID: 84885037793     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/0-387-25660-1_7     Document Type: Conference Paper

References (21)

1. L. Bouganim, P. Pucheral, Chip-Secured Data Access: Confidential Data on Untrusted Servers, in: Very Large Data Bases (VLDB), pp. 13 1-142,2002.
2. D. V. Klein, Foiling the Cracker-A Survey of, and Improvements to, Password Security, in: 2nd USENIXSecurity, pp. 5-14, 1990
3. E. Bresson, O. Chevassut, and D. Pointcheval, Security Proofs for an Efficient Password-Based Key Exchange, in: ACM. Computer and Commzrnicafion Security, pp. 241-250, 2003.
4. S. Bellovin, and M. Merritt, Encrypted Key Exchange: Password-Based Protocols Secure Against Dictionary Attacks, in: IEEE Symposium on Research in Security and Privacy, pp. 72-84, 1992.
5. S. Bellovin and M. Merritt, Augmented Encrypted Key Exchange: A Password-Based Protocol Secure Against Dictionary Attacks and Password File Compromise, in: ACM. Computer and Communication Seczrrity, pp. 244-250, 1993.
6. J. Katz, R. Ostrovsky, and M. Yung, Efficient Password-Authenticated Key Exchange Using Human-Memorable Passwords, in: Advances in Cpptolog., Euvoclypt'Ol, LNCS 2045, pp. 475-494,2001
7. Halevi, and H. Krawczyk, Public-key Cryptography and Password Protocols, in: ACM Computer and Communication Security, pp. 122-131, 1998.
8. M. K. Boyarsky, Public-key Cryptography and Password Protocols: The Multi-User Case, in: ACM Conference on Computer and Communication Security, pp. 63-72, 1999.
9. J. Katz, R. Ostrovsky, and M. Yung, Forward Secrecy in Password-Only Key Exchange Protocols, in: Security in Communication Networks, 2002
10. M. Bellare, D. Pointcheval, and P. Rogaway, Authenticated Key Exchange Secure against Dictionary Attacks, in: Advance in cryptology, Eurocryptl OO, pp. 139-155,2000.
11. L. Gong, M. Lomas, R. Needham, and J. Saltzer, Protecting Poorly Chosen Secrets from Guessing Attacks, IEEE Journal on Seclected Areas in Communications, 11(5), pp. 648-656,1993.
12. W. Ford, and B. S. Kaliski Jr, Sever-assisted Generation of a Strong Secret from a Password, in: IEEE. 9th International Workshop on Enabling Technologies, 2000.
13. D. P. Jablon, Password Authentication Using Multiple Servers, in: RSA Security Conference, LNCS 2020, pp. 344-360,2001.
14. P. Mackenzie, T. Shrimpton, and M. Jakobsson, Threshold Password-Authenticated Key Exchange, in: Advances in Cryptology, Cryptor02, LNCS 2442, pp. 385-400,2002.
15. M. D. Raimondo, and R. Gennaro, Provably Secure Threshold Password-Authenticated Key Exchange, in: Advances in Cryptology, Ezrrocrypt103, LNCS 2656, pp. 507-523,2003.
16. M. Bellare, P. Rogaway, Random Oracles are Practical: A Paradigm for Designing Efficient Protocols, in: ACM. Computer and Communication Sectrvity, pp. 62-73, 1993.
17. J. Brainard, A. Juels, and B. Kaliski, M. Szydlo, A New Two-Server Approach for Authentication with Short Secret, in: USENIX Security, 2003.
18. A. Shamir, How To Share A Secret, Communications of the ACM, Volume 22, pp. 612-613, 1979.
19. Goldreich, Secure Multi-party Computatlon, Working Draft, Version 1.3, June 2001.
20. D. Boneh, The Decision Diffie-Hellman Problem, in: 3rd International Algorithmic Number Theory Symposium, LNCS 1423, pp. 48-63, 1998.
21. J. Kohl, and C. Neuman, RFC 15 10: The Kerberos Network Authentication Service, 1993.