Ubiquitous One-Time Password Service Using Generic Authentication Architecture
نویسندگان
چکیده
In this paper we exploit GAA to build a scheme that converts a simple static password authentication mechanism into a one-time password (OTP) system. The scheme employs a GAA-enabled user device with a display and an input capability (e.g. a 3G mobile phone) and a GAA-aware server. Most importantly, the device does not need to be user or server specific, and can be used in the protocol with no registration or configuration (except for the installation of the necessary application software). The system also fits well to the multi-institution scenario and hence enables the provision of ubiquitous and on-demand OTP services.
منابع مشابه
Ubiquitous One-Time Password Service Using the Generic Authentication Architecture
The Generic Authentication Architecture (GAA) is a standardised extension to the mobile authentication infrastructure that enables the provision of security services, such as key establishment, to network applications. In this paper we first show how Trusted Computing can be extended in a GAA-like framework to offer new security services. We then propose a general scheme that converts a simple ...
متن کاملModified Authentication Using One Time Password to Support Web Services Security
Freshness in accessing a web service is a challenge identified by the security of the website itself. It usually including advantages and disadvantages on architecture security and the machine language used by the site. With the recent technology available completed by sufficient information about risks threat in web services, there are a lot of things to be concerned. In this paper, we try to ...
متن کاملA Novel User Authentication Scheme Based on QR-Code
User authentication is one of the fundamental procedures to ensure secure communications and share system resources over an insecure public network channel. Thus, a simple and efficient authentication mechanism is required for securing the network system in the real environment. In general, the password-based authentication mechanism provides the basic capability to prevent unauthorized access....
متن کاملA Security Framework for Archiving the Permission of Mobile Terminal in Wireless Environment
— Traditional voice traffic over mobile communication has been changed into data and media contents traffic, which makes traffic amount increases and speedy data transfer required. In the near future ubiquitous mobile terminal environment will be common so that security issues will arise due to many heterogeneous equipments and connections. In this paper, many previous methods used for terminal...
متن کاملAn Enhanced Lightweight Anonymous Authentication Scheme for a Scalable Localization Roaming Service in Wireless Sensor Networks
More security concerns and complicated requirements arise in wireless sensor networks than in wired networks, due to the vulnerability caused by their openness. To address this vulnerability, anonymous authentication is an essential security mechanism for preserving privacy and providing security. Over recent years, various anonymous authentication schemes have been proposed. Most of them revea...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2010