Password Management Research Articles

Universally Composable Hierarchical Hybrid Authenticated Key Exchange

Password-based authenticated key exchange protocols are more convenient and practical, since users employ human-memorable passwords that are simpler to remember than cryptographic secret keys or public/private keys. Abdalla, Fouque, and Pointcheval proposed the password-based authenticated key exchange protocol in a 3-party model (GPAKE) in which clients trying to establish a secret do not share a password between themselves but only with a trusted server. On the other hand, Canetti presented a general framework, which is called universally composable (UC) framework, for representing cryptographic protocols and analyzing their security. In this framework, the security of protocols is maintained under a general protocol composition operation called universal composition. Canetti also proved a UC composition theorem, which states that the definition of UC-security achieves the goal of concurrent general composition. A server must manage all the passwords of clients when the 3-party password-based authenticated key exchange protocols are realized in large-scale networks. In order to resolve this problem, we propose a hierarchical hybrid authenticated key exchange protocol (H2AKE). In H2AKE, forwarding servers are located between each client and a distribution server, and the distribution server sends the client an authentication key via the forwarding servers. In H2AKE, public/private keys are used between servers, while passwords are also used between clients and forwarding servers. Thus, in H2AKE, the load on the distribution server can be distributed to the forwarding servers concerning password management. In this paper, we define hierarchical hybrid authenticated key exchange functionality. H2AKE is the universal form of the hierarchical (hybrid) authenticated key exchange protocol, which includes a 3-party model, and it has the characteristic that the construction of the protocol can flexibly change according to the situation. We also prove that H2AKE is secure in the UC framework with the security-preserving composition property.

Universally Composable Client-to-Client General Authenticated Key Exchange

In large-scale networks, users want to be able to communicate securely with each other over a channel that is unreliable. When the existing 2- and 3-party protocols are realized in this situation, there are several problems: a client must hold many passwords and the load on the server concerning password management is heavy. In this paper, we define a new ideal client-to-client general authenticated key exchange functionality, where arbitrary 2-party key exchange protocols are applicable to protocols between the client and server and between servers. We also propose a client-to-client general authenticated key exchange protocol C2C-GAKE as a general form of the client-to-client model, and a client-to-client hybrid authenticated key exchange protocol C2C-HAKE as an example protocol of C2C-GAKE to solve the above problems. In C2C-HAKE, a server shares passwords only with clients in the same realm respectively, public/private keys are used between respective servers, and two clients between different realms share a final session key via the respective servers. Thus, with regard to password management in C2C-HAKE, the load on the server can be distributed to several servers. In addition, we prove that C2C-HAKE securely realizes the above functionality. C2C-HAKE is the first client-to-client hybrid authenticated key exchange protocol that is secure in a universally composable framework with a security-preserving composition property.

Authentication and authorisation infrastructure for the mobility of users of academic libraries

PurposeTo give an overview of the current state and trends in authentication and authorisation in satisfying academic library users' mobility and instant access to digital information resources, and to propose that libraries strongly support efforts to establish a global authentication and authorisation infrastructure.Design/methodology/approachAn overview of some national projects towards such an infrastructure for public institutions, including libraries, is provided.FindingsThere are many projects working towards such an infrastructure, but no single widely accepted authentication and authorisation infrastructure exists yet. A global authentication and authorisation infrastructure will enable users to use a single username and a password for all local and remote library services. It will consist of interconnected authentication/authorisation servers, where each institution will be responsible for a local user database.Research limitations/implicationsThe list of projects towards global authentication and authorisation infrastructure is not complete. Projects are not described in detail.Practical implicationsLibraries will have to join efforts towards a global authentication and authorisation infrastructure and to integrate this into their applications. That way, they will improve services for their users who are remote from their home institutions, enable users to access new services faster, lessen user frustration with forgotten passwords, reduce time spent on administrative tasks and also reduce the burden of password management and enable security improvements.Originality/valueThis paper fulfils an identified need to speed up the development of a global authentication and authorisation infrastructure.

Desktop Security and Usability Trade-Offs: An Evaluation of Password Management Systems

As the casual and business use of computer systems expands, so do the chances that the security of these systems will be breached. One of the most exploitable elements in the chain of security is the password. This is the most common method of authentication and also one of the most easily broken. Numerous studies have been done on the fitness and memorability of passwords; improved password behavior benefits the security of many systems.

Authentication with P2P Agents

The problem of network security is now heavily focused on user and agent authentication. In particular, higher levels of automated management and autonomous behaviour are economically necessary within security services. This work focuses on a peer-to-peer (P2P) network architecture in support of an authentication service application. The paper considers whether the key properties of P2P systems, such as scalability, robustness and resilience, may be of significant value in the context of designing a secure agent-based user authentication service. The task of authenticating legitimate network users across distributed systems and services remains a challenging process. The proposed solution is to use a distributed agent-based application to address the process of client authentication and the maintenance of user credentials. Using an agent-to-agent platform, an autonomous and scalable defence mechanism has been constructed. The agent architecture provides a number of security services with the goal of automating the process of user authentication and trust management. In particular, the agents handle all password, encryption keys and certificate management.

Providing secure remote access to legacy healthcare applications

While the widespread adoption of Internet and intranet technology has been one of the most exciting developments of recent years, many hospitals are finding that their data and legacy applications do not naturally fit into the new methods of dissemination. Existing applications often rely on isolation or trusted networks for their access control or security, whereas untrusted wide area networks pay little attention to the authenticity, integrity or confidentiality of the data they transport. Many hospitals do not have the resources to develop new `network-ready' versions of existing centralised applications. The article examines the issues that must be considered when providing network access to an existing healthcare application, and describes how we have implemented the proposed solution in one healthcare application, namely the diabetic register at Hope Hospital. The architecture is described which allows remote access to the legacy application, providing it with encrypted communications and strongly authenticated access control, but without requiring any modifications to the underlying application. As well as comparing alternative ways of implementing such a system, the article also considers issues relating to usability and manageability, such as password management.

Intermediaries: new places for producing and manipulating Web content

We propose a new approach to programming Web applications that increases the Web's computational power, the Web's flexibility, and Web programmer productivity. Whereas Web servers have traditionally been responsible for producing all content, intermediaries now provide new places for producing and manipulating Web data. We define intermediaries as computational elements that lie along the path of a Web transaction. In this paper, we describe the fundamental ideas behind intermediaries and provide a collection of example applications. We also describe WBI, an implemented architecture for building intermediaries that we have used to construct many applications, including personal histories, password management, image distillation, collaborative filtering, targeted advertising, and Web advising.

Seamless and Integrated Access to the World of Electronic Journals

Summary Blackwell's Electronic Journal Navigator provides a single point of access, reference, control and financial management for electronic journal subscriptions. The service is accessible over the Internet using a World Wide Web browser. Blackwell's have a global network of servers that provide the user with instantaneous access to the full text and abstracts of peer-reviewed scholarly electronic journal articles regardless of their physical format, location, or publisher. Libraries subscribing to electronic journals can benefit from simplified password and access management; standard and customized journal usage analysis and management reports; and assistance with electronic archiving and electronic document delivery. Library users can benefit from a single access and authentication point for all electronic journals; a single search interface and extensive browsing functionality; and alerting services and delivery of full-text electronic articles direct to their PC.

Inadequate security encourages the thief

Reviews the findings of the Audit Commission′s fifth triennial report on computer fraud and abuse, published in October 1994. This shows that, while computer fraud and abuse is a growth industry, many organizations do not seem to take computer security seriously. Also considers a survey conducted by an undergraduate of Leeds Metropolitan University. This reached broadly similar conclusions. Many organizations do not have basic computer security procedures in place. Simple matters such as proper management of passwords and virus checking are often neglected. Management should ensure basic procedures are in place. These low‐cost procedures can do much to reduce the incidence of computer fraud and thereby avoid the associated cost and inconvenience.

Beyond preliminary analysis of the WANK and OILZ worms: a case study of malicious code

In October 1989 a DECnet worm attacked the NASA Space Physics Analysis Network (SPAN) and the DOE's High-Energy Physics (HEP) and Energy Science (ES) networks. Approximately two weeks later a second worm, a modification of the first, attacked other systems. These worms (written in DCL) used several methods of propagation, including guessing accounts with an identical username and password and entering through system accounts and unpassworded accounts. The original version of the worm, WANK (Worms Against Nuclear Killers), contained bugs preventing, among other things, penetration into unpassworded accounts. In the second version, OILZ, some of the problems of the first worm were corrected. OILZ intruded into user accounts probed from remote systems already breached by this worm. OILZ masqueraded its presence, and its method of discovering user accounts and privileged access helped circumvent standard VMS alarm settings. The style of each worm code indicated that the worm evolved over time and was not written by a single individual. The paper focuses on selected procedures from both variations of the worm and analyzes the authorship and history of the development of this worm. This information may be useful not only in determining the origin of this malicious code, but also in studying the evolution of malicious code. This paper also presents some lessons learned from studying this attack and applies these lessons to recommendations for network policy. More than anything else, the WANK and OILZ worms demonstrate the need for effective password management and proper system and network configuration. Determining the source and style of malicious code can assist in developing policy and procedures for effectively detecting and preventing attacks of this type.

TRASEC: Belgian security system for electronic funds transfers

The Belgian banking community has designed a standard security system TRASEC (TRAnsmission SECurity) for EFT (Electronic Funds Transfer) between corporate customers and all financial institutions, which will become operational by the end of 1987. TRASEC ensures the integrity and authentication of EFT in an automated environment and is easily integrated in the actual banking procedures. The system is independent of the transfer medium, the application, and the configuration and type of the computers of the customer and the financial institution. The customer's system consists of a condensing module and an authentication module. The condensing module is a one-way-function, implemented as a program on the customer's computer, which condenses a transfer file to a digest. The digest is the input of the authentication module, which calculates a digital signature (MAC). This authentication module is a smart card which contains the message authentication algorithm based on DES, password management, secret keys, passwords, sequence number, etc…

TRASEC: National Security System for EFTs in Belgium

Abstract TRASEC (TRAnsaction SECurity) is the standard security system for EFT (Electronic Funds Transfer) between corporate customers and Belgian financial institutions. TRASEC ensures the integrity and authentication of EFT and is easily integrated in any automated environment. The customer's system consists of a condensing module and an authentication module. The condensing module is a one-way-function, implemented as a program on the customer's computer, which condenses a tranfer file to a digest. The digest is the input of the authentication module, which calculates a electronic signature (MAC). This authentication module is a smart card which contains the message authentication algorithm (based on DES), password management, secret keys, passwords, sequence number, etc.