The OffPAD: Requirements and Usage

Rosenberger

Miralabé³

et al. 2015

J Trust Manag

Self Cite

Identity management is a rather general concept that covers technologies, policies and procedures for recognising and authenticating entities in ICT environments. Current identity management solutions often have inadequate usability and scalability, or they provide inadequate authentication assurance. This article describes local user-centric identity management as an approach to providing scalable, secure and user friendly identity management. This approach is based on placing technology for identity management on the user side, instead of on the server side or in the cloud. This approach strengthens authentication assurance, improves usability, minimizes trust requirements, and has the advantage that trusted online interaction can be upheld even in the presence of malware infection in client platforms. More specifically, our approach is based on using an OffPAD (Offline Personal Authentication Device) as a trusted device to support the different forms of authentication that are necessary for trusted interactions. A prototype OffPAD has been implemented and tested in user experiments.

Section: Offpad -The Offline Personal Authentication Devicementioning

confidence: 99%

Section: Local User-centric Identity Managementmentioning

confidence: 99%

Local user-centric identity management

Rosenberger

Miralabé³

et al. 2015

J Trust Manag

Self Cite

“…What is needed is a richer modality of authentication. In the next section, we define three authentication modalities [12].…”

Section: Basics Firstmentioning

confidence: 99%

“…Since the OffPAD is, in addition, located on the user side, it is physically local to the user, and thereby represents technology for local user-centric identity management. The OffPAD can be used for a number of different security services [12], but this article only focuses on how it enables trusted interaction through mutual entity (user and server ) authentication as well as data origin authentication. The OffPAD can also support incremental authentication modalities, i.e.…”

Section: Top Down Approach : Lucidman Basicsmentioning

confidence: 99%

See 1 more Smart Citation

1,2, Pause: Lets Start by Meaningfully Navigating the Current Online Authentication Solutions Space

Loutfi

2015

Trust Management IX

Self Cite

Consuming services online is an exponentially growing trend within different industries. A robust online authentication solution to these services is a critical requirement for establishing trust between end users and service providers. Currently, the shortcomings of password based authentication solutions are well recognized.Hence, many alternative strong authentication solutions are being adopted. However, the latter create a siloed model where each service provider dictates a different method (OTP, SMS...) to end users. To resolve these challenges, considerable efforts are being deployed by both academia and industry. However, assessing these efforts is not a trivial task. This paper provides a framework of a well-motivated set of attributes, for categorizing and assessing online authentication solutions. Based on this framework, two main approaches for online authentication are identified and exemplified: LUCIDMAN and FIDO. The results of this research are anticipated to make the navigation of the online authentication solutions space more systematic, and facilitate knowledge transfer between all stakeholders.

One-Time Biometrics for Online Banking and Electronic Payment Authentication

Plateaux

Lacharme

Lecture Notes in Computer Science

et al. 2014

Self Cite

Abstract-Online banking and electronic payment systems on the Internet are becoming increasingly advanced. On the machine level, transactions take place between client and server hosts through a secure channel protected with SSL/TLS. User authentication is typically based on two or more factors. Nevertheless, the development of various malwares and social engineering attacks transform the user's PC in an untrusted device and thereby making user authentication vulnerable. This paper investigates how user authentication with biometrics can be made more robust in the online banking context by using a specific device called OffPAD. This context requires that authentication is realized by the bank and not only by the user (or by the personal device) contrary to standard banking systems. More precisely, a new protocol for the generation of one-time passwords from biometric data is presented, ensuring the security and privacy of the entire transaction. Experimental results show an excellent performance considering with regard to false positives. The security analysis of our protocol also illustrates the benefits in terms of strengthened security.