NDLI: UC-secure Two-Server Password-Based Authentication Protocol and Its Applications

Please wait, while we are loading the content...

Statistical Detection of Online Drifting Twitter Spam: Invited Paper

ORIGEN: Automatic Extraction of Offset-Revealing Instructions for Cross-Version Memory Analysis

Enabling Ciphertext Deduplication for Secure Cloud Storage and Access Control

FSSR: Fine-Grained EHRs Sharing via Similarity-Based Recommendation in Cloud-Assisted eHealthcare System

R-Droid: Leveraging Android App Analysis with Static Slice Optimization

Credential Wrapping: From Anonymous Password Authentication to Anonymous Biometric Authentication

Recipient Revocable Identity-Based Broadcast Encryption: How to Revoke Some Recipients in IBBE without Knowledge of the Plaintext

SecHOG: Privacy-Preserving Outsourcing Computation of Histogram of Oriented Gradients in the Cloud

NFPS: Adding Undetectable Secure Deletion to Flash Translation Layer

Mystique: Evolving Android Malware for Auditing Anti-Malware Tools

Vehicle Self-Surveillance: Sensor-Enabled Automatic Driver Recognition

Binary Analysis for Autonomous Hacking: Invited Abstract

The Request for Better Measurement: A Comparative Evaluation of Two-Factor Authentication Schemes

Secure Dynamic SSE via Access Indistinguishable Storage

Efficient Authenticated Multi-Pattern Matching

Model-based Security Testing: An Empirical Study on OAuth 2.0 Implementations

CDRep: Automatic Repair of Cryptographic Misuses in Android Applications

MAXS: Scaling Malware Execution with Sequential Multi-Hypothesis Testing

Privacy and Utility of Inference Control Mechanisms for Social Computing Applications

Generic Construction of Publicly Verifiable Predicate Encryption

Juggling the Gadgets: Binary-level Code Randomization using Instruction Displacement

Privacy-Preserving Spectral Analysis of Large Graphs in Public Clouds

Publicly Verifiable Secure Cloud Storage for Dynamic Data Using Secure Network Coding

UC-secure Two-Server Password-Based Authentication Protocol and Its Applications

Dealerless Corporate Key Generation for Identity-Based Encryption Schemes

Practical and Efficient Attribute-Based Encryption with Constant-Size Ciphertexts in Outsourced Verifiable Computation

Preventing Page Faults from Telling Your Secrets

StormDroid: A Streaminglized Machine Learning-Based System for Detecting Android Malware

Automated Dynamic Firmware Analysis at Scale: A Case Study on Embedded Web Interfaces

Homomorphic Linear Authentication Schemes from (ε)-Authentication Codes

Building an Encrypted, Distributed, and Searchable Key-value Store

Efficient Verifiable Computation of Linear and Quadratic Functions over Encrypted Data

Discovering Malicious Domains through Passive DNS Data Graph Analysis

MobiPot: Understanding Mobile Telephony Threats with Honeycards

Real-Time Detection of Malware Downloads via Large-Scale URL->File->Machine Graph Mining

Privacy Preserving Disease Treatment & Complication Prediction System (PDTCPS)

Novel Constructions of Cramer-Shoup Like Cryptosystems Based on Index Exchangeable Family

No-Execute-After-Read: Preventing Code Disclosure in Commodity Software

Efficient Multi-Function Data Sharing and Searching Mechanism for Cloud-Based Encrypted Data

Efficient Techniques for Publicly Verifiable Delegation of Computation

Client-CASH: Protecting Master Passwords against Offline Attacks

Anonymous Identity-Based Broadcast Encryption with Constant Decryption Complexity and Strong Security

Efficient Secure Outsourcing of Large-scale Quadratic Programs

Identifying and Utilizing Dependencies Across Cloud Security Services

FLEX: A Flexible Code Authentication Framework for Delegating Mobile App Customization

Distributed Detection of Single-Stage Multipoint Cyber Attacks in a Water Treatment Plant

Forgery-Resistant Touch-based Authentication on Mobile Devices

Anonymous Role-Based Access Control on E-Health Records

Efficient Privacy-Preserving Matrix Factorization via Fully Homomorphic Encryption: Extended Abstract

Half-Baked Cookies: Hardening Cookie-Based Authentication for the Modern Web

Checking Intent-based Communication in Android with Intent Space Analysis

Smartwatch-Based Keystroke Inference Attacks and Context-Aware Protection Mechanisms

Data Exfiltration in the Face of CSP

Efficient Construction of Completely Non-Malleable CCA Secure Public Key Encryption

ROPMEMU: A Framework for the Analysis of Complex Code-Reuse Attacks

Device-Enhanced Password Protocols with Optimal Online-Offline Protection

Password-Controlled Encryption with Accountable Break-Glass Access

Verifiable Outsourcing Algorithms for Modular Exponentiations with Improved Checkability

Hardening OpenStack Cloud Platforms against Compute Node Compromises

DroidDisintegrator: Intra-Application Information Flow Control in Android Apps

Smart Locks: Lessons for Securing Commodity Internet of Things Devices

Practical "Signatures with Efficient Protocols" from Simple Assumptions

Gait-Based Wi-Fi Signatures for Privacy-Preserving

Privacy Breach by Exploiting postMessage in HTML5: Identification, Evaluation, and Countermeasure

Attestation Transparency: Building secure Internet services for legacy clients

revDroid: Code Analysis of the Side Effects after Dynamic Permission Revocation of Android Apps

Leakage Fingerprints: A Non-negligible Vulnerability in Side-Channel Analysis

StemJail: Dynamic Role Compartmentalization

(Deterministic) Hierarchical Identity-based Encryption from Learning with Rounding over Small Modulus

Friend or Foe?: Your Wearable Devices Reveal Your Personal PIN

Anonymous Identity-Based Broadcast Encryption with Chosen-Ciphertext Security

Cross Processor Cache Attacks

Why MAC Address Randomization is not Enough: An Analysis of Wi-Fi Network Discovery Mechanisms

Bilateral-secure Signature by Key Evolving

Anonymous Identification for Ad Hoc Group

Fault Attacks on Efficient Pairing Implementations

CICADAS: Congesting the Internet with Coordinated and Decentralized Pulsating Attacks

Attacks and Defence on Android Free Floating Windows

Error Tolerance based Single Interesting Point Side Channel CPA Distinguisher

SkypeLine: Robust Hidden Data Transmission for VoIP

Generally Hybrid Proxy Re-Encryption: A Secure Data Sharing among Cryptographic Clouds

RamCrypt: Kernel-based Address Space Encryption for User-mode Processes

Your Credentials Are Compromised, Do Not Panic: You Can Be Well Protected

Inside Attack Filtering for Robust Sensor Localization

UC-secure Two-Server Password-Based Authentication Protocol and Its Applications

Content Provider	ACM Digital Library
Author	Zhang, Lin Hu, Xuexian Zhang, Zhenfeng
Abstract	A two-server password-based authentication (2PA) protocol is a special kind of authentication primitive that provides additional protection for the user's password. Through a 2PA protocol, a user can distribute his low-entropy password between two authentication servers in the initialization phase and authenticate himself merely via a matching password in the login phase. No single server can learn any information about the user's password, nor impersonate the legitimate user to authenticate to the honest server. In this paper, we first formulate and realize the security definition of two-server password-based authentication in the well-known universal composability (UC) framework, which thus provides desirable properties such as composable security. We show that our construction is suitable for the asymmetric communication model in which one server acts as the front-end server interacting directly with the user and the other stays backstage. Then, we show that our protocol could be easily extended to more complicate password-based cryptographic protocols such as two-server password-authenticated key exchange (2PAKE) and two-server password-authenticated secret sharing (2PASS), which enjoy stronger security guarantees and better efficiency performances in comparison with the existing schemes.
Starting Page	153
Ending Page	164
Page Count	12
File Format	PDF
ISBN	9781450342339
DOI	10.1145/2897845.2897872
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-05-30
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Two-server password-based authentication Key exchange Secret sharing Universal composability
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in