Second International Conference on Systems and Networks Communications (ICSNC 2007)
Using the mobile phone as a security token for unified authentication
Cap Esterel, France
August 25-August 31
ISBN: 0-7695-2938-0
DOI Bookmark:
http://doi.ieeecomputersociety.org/10.1109/ICSNC.2007.82
The number of different identities and credentials used for authentication towards services on the Internet has increased beyond the manageable. Still, the most common authentication scheme is based on usernames and passwords. This is a weak authentication mechanism, which can be broken by eavesdropping on the network connection or by sloppy handling by the users (e.g. re-use of the same password for different services, writing down the passwords on paper etc.). Also, management of user credentials is a costly task for most companies, estimated by IDC to around 200-300USD pr. user/year. Hence, better solutions for simplified, yet secure authentication, is required in the future. This paper proposes and describes an authentication scheme based on a One-Time Password (OTP) MIDlet running on a mobile phone for unified authentication towards any type of service on the Internet.
Index Terms:
authentcation, mobility
Citation:
Steffen Hallsteinsen, Ivar Jorstad, Do Van Thanh, "Using the mobile phone as a security token for unified authentication," icsnc, pp.68, Second International Conference on Systems and Networks Communications (ICSNC 2007), 2007
Usage of this product signifies your acceptance of the
Terms of Use.
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||