A generic framework for three-factor authentication : preserving security and privacy in distributed systems
Data(s) |
01/08/2011
|
---|---|
Resumo |
As part of the security within distributed systems, various services and resources need protection from unauthorized use. Remote authentication is the most commonly used method to determine the identity of a remote client. This paper investigates a systematic approach for authenticating clients by three factors, namely password, smart card, and biometrics. A generic and secure framework is proposed to upgrade two-factor authentication to three-factor authentication. The conversion not only significantly improves the information assurance at low cost but also protects client privacy in distributed systems. In addition, our framework retains several practice-friendly properties of the underlying two-factor authentication, which we believe is of independent interest. |
Identificador | |
Idioma(s) |
eng |
Publicador |
IEEE |
Relação |
http://dro.deakin.edu.au/eserv/DU:30040589/xiang-ageneric-2011.pdf http://dx.doi.org/10.1109/TPDS.2010.206 |
Direitos |
2011, IEEE |
Palavras-Chave | #authentication #biometrics #distributed systems #password #privacy #security #smart card |
Tipo |
Journal Article |