A secure two-factor authentication scheme for single sign-on services

Kaleb Brasee; S. Kami Makki; Sherali Zeadally

doi:10.1002/sec.36

A secure two-factor authentication scheme for single sign-on services

Kaleb Brasee, S. Kami Makki, Sherali Zeadally

School of Information Science

Research output: Contribution to journal › Article › peer-review

1 Scopus citations

Abstract

We present a novel single sign-on (SSO) scheme known as secure distributed SSO (SeDSSO). SeDSSO provides secure fault-tolerant authentication using threshold key encryption with a distributed authentication service. The authentication service consists of n total authentication servers utilizing a (t, n) threshold encryption scheme, where t distinct server-signed messages are required to generate a message signed by the service. SeDSSO provides secure portable identities by defining a two-factor identity that uses both a username/password and a unique USB device. The combination of a distributed authentication service and two-factor identities allows SeDSSO to securely authenticate users in any environment.

Original language	English
Pages (from-to)	315-323
Number of pages	9
Journal	Security and Communication Networks
Volume	2
Issue number	4
DOIs	https://doi.org/10.1002/sec.36
State	Published - 2009

Keywords

Computer security
Distributed systems
SeDSSO
Single sign-on
Two-factor authentication

ASJC Scopus subject areas

Information Systems
Computer Networks and Communications

Access to Document

10.1002/sec.36

Cite this

@article{1591d3d837b14cfd8c61688508fe5540,

title = "A secure two-factor authentication scheme for single sign-on services",

abstract = "We present a novel single sign-on (SSO) scheme known as secure distributed SSO (SeDSSO). SeDSSO provides secure fault-tolerant authentication using threshold key encryption with a distributed authentication service. The authentication service consists of n total authentication servers utilizing a (t, n) threshold encryption scheme, where t distinct server-signed messages are required to generate a message signed by the service. SeDSSO provides secure portable identities by defining a two-factor identity that uses both a username/password and a unique USB device. The combination of a distributed authentication service and two-factor identities allows SeDSSO to securely authenticate users in any environment.",

keywords = "Computer security, Distributed systems, SeDSSO, Single sign-on, Two-factor authentication",

author = "Kaleb Brasee and {Kami Makki}, S. and Sherali Zeadally",

year = "2009",

doi = "10.1002/sec.36",

language = "English",

volume = "2",

pages = "315--323",

number = "4",

}

TY - JOUR

T1 - A secure two-factor authentication scheme for single sign-on services

AU - Brasee, Kaleb

AU - Kami Makki, S.

AU - Zeadally, Sherali

PY - 2009

Y1 - 2009

N2 - We present a novel single sign-on (SSO) scheme known as secure distributed SSO (SeDSSO). SeDSSO provides secure fault-tolerant authentication using threshold key encryption with a distributed authentication service. The authentication service consists of n total authentication servers utilizing a (t, n) threshold encryption scheme, where t distinct server-signed messages are required to generate a message signed by the service. SeDSSO provides secure portable identities by defining a two-factor identity that uses both a username/password and a unique USB device. The combination of a distributed authentication service and two-factor identities allows SeDSSO to securely authenticate users in any environment.

AB - We present a novel single sign-on (SSO) scheme known as secure distributed SSO (SeDSSO). SeDSSO provides secure fault-tolerant authentication using threshold key encryption with a distributed authentication service. The authentication service consists of n total authentication servers utilizing a (t, n) threshold encryption scheme, where t distinct server-signed messages are required to generate a message signed by the service. SeDSSO provides secure portable identities by defining a two-factor identity that uses both a username/password and a unique USB device. The combination of a distributed authentication service and two-factor identities allows SeDSSO to securely authenticate users in any environment.

KW - Computer security

KW - Distributed systems

KW - SeDSSO

KW - Single sign-on

KW - Two-factor authentication

UR - http://www.scopus.com/inward/record.url?scp=70049102554&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=70049102554&partnerID=8YFLogxK

U2 - 10.1002/sec.36

DO - 10.1002/sec.36

M3 - Article

AN - SCOPUS:70049102554

SN - 1939-0114

VL - 2

SP - 315

EP - 323

JO - Security and Communication Networks

JF - Security and Communication Networks

IS - 4

ER -

A secure two-factor authentication scheme for single sign-on services

Abstract

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this