loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Second International Conference on Systems and Networks Communications (ICSNC 2007)
Using the mobile phone as a security token for unified authentication
Cap Esterel, France
August 25-August 31
ISBN: 0-7695-2938-0
Steffen Hallsteinsen, Norwegian University of Science and Technology, Norway
Ivar Jorstad, Ubisafe, Norway
Do Van Thanh, Telenor R& I, Norway
The number of different identities and credentials used for authentication towards services on the Internet has increased beyond the manageable. Still, the most common authentication scheme is based on usernames and passwords. This is a weak authentication mechanism, which can be broken by eavesdropping on the network connection or by sloppy handling by the users (e.g. re-use of the same password for different services, writing down the passwords on paper etc.). Also, management of user credentials is a costly task for most companies, estimated by IDC to around 200-300USD pr. user/year. Hence, better solutions for simplified, yet secure authentication, is required in the future. This paper proposes and describes an authentication scheme based on a One-Time Password (OTP) MIDlet running on a mobile phone for unified authentication towards any type of service on the Internet.
Index Terms:
authentcation, mobility
Citation:
Steffen Hallsteinsen, Ivar Jorstad, Do Van Thanh, "Using the mobile phone as a security token for unified authentication," icsnc, pp.68, Second International Conference on Systems and Networks Communications (ICSNC 2007), 2007
Usage of this product signifies your acceptance of the Terms of Use.