The Experts below are selected from a list of 192 Experts worldwide ranked by ideXlab platform

Norbert Oláh - One of the best experts on this subject based on the ideXlab platform.

  • Security analysis of a cloud authentication protocol using applied pi calculus
    International Journal of Internet Protocol Technology, 2019
    Co-Authors: Andrea Huszti, Norbert Oláh
    Abstract:

    Nowadays cloud computing is the most promising model within information technology. One of the most important issues is to achieve secure user authentication. Vulnerability of an authentication protocol results in successful attacks against confidentiality and integrity of user data stored and processed in the cloud. In our suggested protocol a person uses a Static Password and a one-time Password for identity verification. Shared control among the cloud servers is provided by applying a Merkle-tree for storing one-time Passwords distributed. A security analysis is carried out in case of outsider adversaries. We show that our authentication protocol fulfils typical security requirements of a key exchange protocol, i.e., authentication of the participants, key secrecy, key freshness and confirmation that both parties know the new key in the Dolev-Yao model.

  • CNS - A simple authentication scheme for clouds
    2016 IEEE Conference on Communications and Network Security (CNS), 2016
    Co-Authors: Andrea Huszti, Norbert Oláh
    Abstract:

    A two-factor authentication scheme that is based on a Static Password known only by the user and a one-time Password generated by a smart card is proposed. Our design goal is to increase security level against insider attacks keeping computational costs as low as possible. Avoiding asymmetric cryptography, we achieve good efficiency results.

  • A simple authentication scheme for clouds
    2016 IEEE Conference on Communications and Network Security (CNS), 2016
    Co-Authors: Andrea Huszti, Norbert Oláh
    Abstract:

    A two-factor authentication scheme that is based on a Static Password known only by the user and a one-time Password generated by a smart card is proposed. Our design goal is to increase security level against insider attacks keeping computational costs as low as possible. Avoiding asymmetric cryptography, we achieve good efficiency results.

Li Tao-shen - One of the best experts on this subject based on the ideXlab platform.

  • Research on dynamic Password security system for enterprise office network based on TEA algorithm
    Information Technology, 2010
    Co-Authors: Li Tao-shen
    Abstract:

    A two-factor security system for enterprise office network based on Tiny Encrypt Algorithm(TEA) plus the SMS dynamic Password and the user's Static Password is proposed in this paper.This system sets up a short message service platform,randomly creates dynamic Password by the TEA algorithm and accomplishes encryption or encoding processing to this check code.This Password is sent to user's mobile phone as the short message,and then user uses this dynamic Password and user's Static Password to login on the office network.This system need not change existing system architecture of enterprise office network,and can increase the security level of enterprise's network and verify the user's legitimacy effectively.

  • Design a Two-Factor Security System for Enterprise Office Network Based on SMS Dynamic Password
    Journal of Guangxi Academy of Sciences, 2009
    Co-Authors: Li Tao-shen
    Abstract:

    In order to enhance the security quotiety of the enterprise office network,a two-factor security system for identity authentication which based on the SMS dynamic Password and the user's Static Password is designed.the work flow and the ecurity mechanism are discussed.The system established a short message service platform,created randomly dynamic check code through the algorithm procedure and sended the check code as the short message to user's mobile phone.The user logins on the office network by the dynamic check code and the user's Password.This system would increase the security level without changing existing system.

Andrea Huszti - One of the best experts on this subject based on the ideXlab platform.

  • Security analysis of a cloud authentication protocol using applied pi calculus
    International Journal of Internet Protocol Technology, 2019
    Co-Authors: Andrea Huszti, Norbert Oláh
    Abstract:

    Nowadays cloud computing is the most promising model within information technology. One of the most important issues is to achieve secure user authentication. Vulnerability of an authentication protocol results in successful attacks against confidentiality and integrity of user data stored and processed in the cloud. In our suggested protocol a person uses a Static Password and a one-time Password for identity verification. Shared control among the cloud servers is provided by applying a Merkle-tree for storing one-time Passwords distributed. A security analysis is carried out in case of outsider adversaries. We show that our authentication protocol fulfils typical security requirements of a key exchange protocol, i.e., authentication of the participants, key secrecy, key freshness and confirmation that both parties know the new key in the Dolev-Yao model.

  • CNS - A simple authentication scheme for clouds
    2016 IEEE Conference on Communications and Network Security (CNS), 2016
    Co-Authors: Andrea Huszti, Norbert Oláh
    Abstract:

    A two-factor authentication scheme that is based on a Static Password known only by the user and a one-time Password generated by a smart card is proposed. Our design goal is to increase security level against insider attacks keeping computational costs as low as possible. Avoiding asymmetric cryptography, we achieve good efficiency results.

  • A simple authentication scheme for clouds
    2016 IEEE Conference on Communications and Network Security (CNS), 2016
    Co-Authors: Andrea Huszti, Norbert Oláh
    Abstract:

    A two-factor authentication scheme that is based on a Static Password known only by the user and a one-time Password generated by a smart card is proposed. Our design goal is to increase security level against insider attacks keeping computational costs as low as possible. Avoiding asymmetric cryptography, we achieve good efficiency results.

Xin-wen Wu - One of the best experts on this subject based on the ideXlab platform.

  • TSPass: A Dynamic User Authentication Scheme Based On Time and Space
    2017
    Co-Authors: Xin-wen Wu, Kun Tang
    Abstract:

    Summary On-line service providers and their users have suffered from various sophisticated attacks on user authentication. There is a strong desire to develop and implement more secure authentication schemes to protect web services against security threats. Intensive work has been done trying to improve upon traditional Password authentication, resulting in two-factor authentication, session key exchanging schemes and time dynamic Password schemes. However, these schemes have been proved not effective, due to their security design or additional overheads. In this paper, we proposed a secure dynamic user authentication scheme. Unlike the traditional Password authentication (where a Static Password is used) or two-factor authentication (which requires the user’s Password and another pieces of time-dynamic authentication information), our proposed authentication scheme will be based on a dynamic one-time Password (OTP), which is generated by the user’s Password, the authenticating time, as well as a unique property that represents the user’s location at the moment of authentication (for example, the MAC address of the machine that the user uses for authentication). Compared with traditional OTPs which are only time-dynamic, the proposed scheme is based on both time and space (location). It is thus called TSPass. As we will analyze, our TSPass authentication improves upon two-factor authentication and other currently known authentication schemes, and effectively protect user’s account against various attacks (including phishing attack, reply attack, and perfect-man-in-the-middle attack). Our testing and simulation work show that the proposed authentication is efficient and user friendly.

  • ISCIT - A novel dynamic user authentication scheme
    2012 International Symposium on Communications and Information Technologies (ISCIT), 2012
    Co-Authors: Xin-wen Wu
    Abstract:

    Network based businesses including on-line financial services have suffered from various attacks on user authentication. There is a strong desire to develop and implement more secure authentication schemes to protect businesses and clients against security threats. Intensive work has been done in this area, to improve on traditional Password authentication, such as two-factor authentication, session key exchanging scheme, and dynamic Password scheme. However, these schemes have been proved not effective, due to their security design or additional overheads. In this paper, we proposed a secure dynamic user authentication scheme. Unlike the traditional Password authentication (where a Static Password is used) or two-factor authentication (where two pieces of authentication information are required), our proposed authentication scheme will use a dynamic one-time Password (OTP), based on user's Password, the authenticating time, as well as a unique property that the user possesses at the moment of authentication (that is, “something the user has”, for example, the MAC address of the machine that the user uses for authentication). As we will analyze, the proposed authentication improves upon two-factor authentication and other currently known authentication schemes, and effectively protect user's account against various attack (such as phishing attack, reply attack, and perfect-man-in-the-middle attack). Our testing and simulation work will show that the proposed authentication is efficient and user friendly.

Yuegong Zhang - One of the best experts on this subject based on the ideXlab platform.

  • ICCT - An improved one-time Password authentication scheme
    2013 15th IEEE International Conference on Communication Technology, 2013
    Co-Authors: Yuegong Zhang
    Abstract:

    The rapid development of the Internet facilitates our lives in many aspects. More and more business will be done through Internet. Under such circumstances, enough attention must be given to the information security, of which the identity authentication is one important problem. In the traditional authentication scheme, the user provides the username and Static Password to service provider, but there are some inherent shortcomings of this method—Static Passwords maybe guessed, forgotten, and eavesdropped. One-Time Password (OTP) is considered as the strongest authentication scheme among all Password-based solutions. In this paper, a novel two-factor authentication scheme based OTP is proposed. The scheme not only satisfies the mutual authentication between the user and service provider, but also presents higher security and lower computational cost than traditional schemes based OTP.