Independent One-time Passwords
Author(s): Aviel D. Rubin

Date: 1996
Publication: USENIX Computing Systems Volume 9, Number 1
Page(s): 15 - 27
Publisher: USENIX
Source 1: http://citeseer.ist.psu.edu/rubin96independent.html
Source 2: http://www.cs.nyu.edu/~rubin/one-time.ps.gz

Abstract or Summary:
Existing one-time password (OTP) schemes suffer several drawbacks. Token-based systems are expensive, while software-based schemes rely on one-time passwords that are dependent on each other. The are disadvantages to authentication schemes that rely on dependent OTP's. It is difficult to replicate the authentication server without lowering security. Also, currrent authentication schemes based on dependent OTP's only authenticate the initial connection; the remainder of the session is assumed to be authenticated. Experience shows that connections can be hijacked. A new scheme for generating one-time passwords that are independent is presented. The independence property enables easy replication of the authentication server, and authentication that is persistent for the lifetime of a connection. This mechanism is also ideally suited for smart card applications. Our implementation and several applications are discussed.



Do you have additional information to contribute regarding this research paper? If so, please email siteupdates@passwordresearch.com with the details.

<-- Back to Authentication Research Paper Index





[Home] [About Us] [News] [Research]

Copyright © 2016 PasswordResearch.com