Using CardSpace as a Password Manager

Abstract : In this paper we propose a novel scheme that allows Windows CardSpace to be used as a password manager, thereby improving the usability and security of password use as well as potentially encouraging CardSpace adoption. Usernames and passwords are stored in personal cards, and these cards can be used to sign on transparently to corresponding websites. The scheme does not require any changes to login servers or to the CardSpace identity selector and, in particular, it does not require websites to support CardSpace. We describe how the scheme operates, and give details of a proof-of-concept prototype. Security and usability analyses are also provided.
Type de document :
Communication dans un congrès
Elisabeth Leeuw; Simone Fischer-Hübner; Lothar Fritsch. Second IFIP WG 11.6 Working Conference on Policies and Reseach Management (IDMAN), Nov 2010, Oslo, Norway. Springer, IFIP Advances in Information and Communication Technology, AICT-343, pp.18-30, 2010, Policies and Research in Identity Management. 〈10.1007/978-3-642-17303-5_2〉
Liste complète des métadonnées

Littérature citée [11 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01054403
Contributeur : Hal Ifip <>
Soumis le : mercredi 6 août 2014 - 15:29:58
Dernière modification le : vendredi 11 août 2017 - 15:05:20
Document(s) archivé(s) le : mercredi 26 novembre 2014 - 00:51:57

Fichier

CardSpace_Password_Manager_28C...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Haitham S. Al-Sinani, Chris J. Mitchell. Using CardSpace as a Password Manager. Elisabeth Leeuw; Simone Fischer-Hübner; Lothar Fritsch. Second IFIP WG 11.6 Working Conference on Policies and Reseach Management (IDMAN), Nov 2010, Oslo, Norway. Springer, IFIP Advances in Information and Communication Technology, AICT-343, pp.18-30, 2010, Policies and Research in Identity Management. 〈10.1007/978-3-642-17303-5_2〉. 〈hal-01054403〉

Partager

Métriques

Consultations de la notice

251

Téléchargements de fichiers

176