• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>IEEE Conference on Communications and Network Security >Emulating U2F authenticator devices
【24h】

Emulating U2F authenticator devices

机译：模拟U2F身份验证器设备

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Password authentication has been made more secure by adding additional factors. Unfortunately, popular two-factor authentication methods are vulnerable to attacks themselves. Therefore, the FIDO alliance proposed Universal Second Factor (U2F), an open standard aiming for unified interfaces, secure protocols, and hardware-backed tokens for authentication. However, U2F requires the user to purchase and constantly carry yet another distinct device. We propose an enhancement to U2F making it more user friendly. First, we enable the use of existing cryptographic devices a user already carries around (e. g. a bank card or her smartphone). Second, we provide increased token mobility by enabling remote authenticator tokens. Our showcases demonstrate logging into a web application as well as logging into Microsoft's Windows 10 with a cryptographic smart card via card reader or NFC, Austria's eID, a smartphone, a cloud key service, and a remote U2F token. Our evaluations indicate that our approach is more usable and easier to deploy than stock U2F while it keeps its security features intact. Only a few additional risks are induced by the underlying cryptographic devices. All in all, we believe that our enhancements can push acceptance of U2F even further and thus, make everyone benefit from state-of-the-art authentication.
机译：通过添加其他因素，密码身份验证变得更加安全。不幸的是，流行的两因素身份验证方法本身容易受到攻击。因此，FIDO联盟提出了通用第二因素（U2F），这是一个开放标准，旨在统一接口，安全协议和硬件支持的令牌进行身份验证。但是，U2F要求用户购买并不断携带另一个不同的设备。我们建议对U2F进行增强，使其更加用户友好。首先，我们允许使用用户已经随身携带的现有加密设备（例如，银行卡或她的智能手机）。其次，我们通过启用远程身份验证器令牌来提供增强的令牌移动性。我们的展示展示了登录网络应用程序以及通过读卡器或NFC，奥地利的eID，智能手机，云密钥服务和远程U2F令牌使用加密智能卡登录Microsoft的Windows 10。我们的评估表明，与现有的U2F相比，我们的方法在保持其安全功能完整的同时，更实用，更易于部署。底层密码设备仅引起一些额外的风险。总而言之，我们相信我们的增强功能可以进一步推动人们对U2F的接受，从而使每个人都从最新的身份验证中受益。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号