A secure and efficient user authentication scheme for the web

Sadqi, Yassine; Asimi, Ahmed; Asimi, Younes

doi:10.1504/ijitst.2015.073936

Cited by 5 publications

(12 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Also in this phase, the proposed scheme relies on HTTPS to protect UPK i. confidentiality and integrity. This phase proceeds as follows: To show the feasibility and effectiveness of the proposed scheme [21], we realize a prototype. Mainly it aims to experience the registration phase, mutual authentication and session management phases.…”

Section: A Registration Phasementioning

confidence: 99%

“…Specifically, our proposal does not require any additional equipment except a modern web browser. Later, we presented an improved version of StrongAuth including a secure session management mechanism [21]. This version covers the complete cycle of authentication in the context of web applications, consisting of mutual authentication phases and the subsequent HTTP requests authentication [21].…”

Section: Introduction (Heading 1)mentioning

confidence: 99%

“…In this paper, we realize a prototype consisting of two modules: A registration module that implements the registration phase of the proposed scheme [21], and another authentication module that integrates both the mutual authentication and the session management phases. On the one hand, we integrate the client architecture component as an extension of Mozilla Firefox that can easily install it using Mozilla Firefox Add-ons Manager and the server component as a service of PHP applications within the WAMP platform, which allows us to avoid recompiling the source code of Mozilla Firefox and have an independent server component of the application code; which facilitates the deployment.…”

Section: Introduction (Heading 1)mentioning

confidence: 99%

“…On the one hand, we integrate the client architecture component as an extension of Mozilla Firefox that can easily install it using Mozilla Firefox Add-ons Manager and the server component as a service of PHP applications within the WAMP platform, which allows us to avoid recompiling the source code of Mozilla Firefox and have an independent server component of the application code; which facilitates the deployment. On the other hand, we evaluate the performance of registration and authentication modules to evaluate the theoretical study presented in [21].…”

Section: Introduction (Heading 1)mentioning

confidence: 99%

“…The rest of the paper is organized as follows: in section 2 we briefly review the registration, the authentication and session management phases of the proposed scheme [21]. In Section 3 we are particularly interested in the implementation of our prototype to show the feasibility of the proposed scheme.…”

Section: Introduction (Heading 1)mentioning

confidence: 99%

See 4 more Smart Citations

Implementation and Evaluation of a Secure and Efficient Web Authentication Scheme using Mozilla Firefox and WAMP

Sadqi¹,

Asimi²,

Asimi³

et al. 2016

ijacsa

Self Cite

View full text Add to dashboard Cite

Abstract-User authentication and session management are two of the most critical aspects of computer security and privacy on the web. However, despite their importance, in practice, authentication and session management are implemented through the use of vulnerable techniques. To solve this complex problem, we proposed new authentication architecture, called StrongAuth. Later, we presented an improved version of StrongAuth that includes a secure session management mechanism based on public key cryptography and other cryptographic primitives. In this paper, we present an experimental implementation and evaluation of the proposed scheme to demonstrate its feasibility in real-world scenarios. Specifically, we realize a prototype consisting of two modules: (1) a registration module that implements the registration, and (2) an authentication module integrating both the mutual authentication and the session management phases of the proposed scheme. The experimental results show that in comparison to traditional authentication and session management mechanisms, the proposed prototype presents the lowest total runtime.

show abstract

Section: A Registration Phasementioning

confidence: 99%

Section: Introduction (Heading 1)mentioning

confidence: 99%

Section: Introduction (Heading 1)mentioning

confidence: 99%

Section: Introduction (Heading 1)mentioning

confidence: 99%

Section: Introduction (Heading 1)mentioning

confidence: 99%

See 3 more Smart Citations