The Community for Technology Leaders
RSS Icon
Subscribe
Los Angeles, CA
March 31, 2009 to April 2, 2009
ISBN: 978-0-7695-3507-4
pp: 66-70
ABSTRACT
Sometimes it is desirable to access password-protected resources, but undesirable to disclose the password to the machine in use. In such situations, providing the password is a task that can be delegated to a remote proxy server. This server has to engage the user in a challenge-response mechanism that does not require him to disclose his password to the local machine; if the user responds correctly, then the proxy must recover his password and fetch the protected resource for him. In this paper, we propose three schemes that are suitable for use in this environment and that do not require the proxy server to permanently store a copy of the user's password. We also briefly describe `Keep Your Password Secret' (KYPS), which is a system that implements one of the schemes, and that has been in use for almost two years.
INDEX TERMS
one-time passwords, spyware, keyloggers, password, authentication
CITATION
Andreas Pashalidis, "Accessing Password-Protected Resources without the Password", CSIE, 2009, 2009 WRI World Congress on Computer Science and Information Engineering, CSIE, 2009 WRI World Congress on Computer Science and Information Engineering, CSIE 2009, pp. 66-70, doi:10.1109/CSIE.2009.910
14 ms
(Ver 2.0)

Marketing Automation Platform Marketing Automation Tool