NDLI: PALPAS -- PAssword Less PAssword Synchronization

Content Provider	IEEE Xplore Digital Library
Author	Horsch, M. Hulsing, A. Buchmann, J.
Copyright Year	2015
Description	Author affiliation: Tech. Univ. Darmstadt, Darmstadt, Germany (Horsch, M.; Buchmann, J.) \|\| Tech. Univ. Eindhoven, Eindhoven, Netherlands (Hulsing, A.)
Abstract	Tools that synchronize passwords over several user devices typically store the encrypted passwords in a central online database. For encryption, a low-entropy, password-based key is used. Such a database may be subject to unauthorized access which can lead to the disclosure of all passwords by an offline brute-force attack. In this paper, we present PALPAS, a secure and user-friendly tool that synchronizes passwords between user devices without storing information about them centrally. The idea of PALPAS is to generate a password from a high entropy secret shared by all devices and a random salt value for each service. Only the salt values are stored on a server but not the secret. The salt enables the user devices to generate the same password but is statistically independent of the password. In order for PALPAS to generate passwords according to different password policies, we also present a mechanism that automatically retrieves and processes the password requirements of services. PALPAS users need to only memorize a single password and the setup of PALPAS on a further device demands only a one-time transfer of few static data.
Starting Page	30
Ending Page	39
File Size	204081
Page Count	10
File Format	PDF
e-ISBN	9781467365901
DOI	10.1109/ARES.2015.23
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-08-24
Publisher Place	France
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Password-based Authentication Authentication Secure Password Generation Generators Entropy Synchronization Servers Cryptography Password Synchronization
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Secure Smart-Card-based Password Authenticated Key Agreement Scheme in Multi-server Environments

Tree parity machine-based One-Time Password authentication schemes

A secure strong password authentication protocol

An improved one-time password authentication scheme

Smart card based secure authentication and key agreement protocol

A secure biometrics-based remote user authentication scheme for secure data exchange

A secure hash-based strong-password authentication protocol using one-time public-key cryptography

A Four-Party Password-Based Authentication Key Exchange Protocol

PALPAS - PAsswordLess PAssword Synchronization

PALPAS -- PAssword Less PAssword Synchronization

Similar Documents

A Secure Smart-Card-based Password Authenticated Key Agreement Scheme in Multi-server Environments

Tree parity machine-based One-Time Password authentication schemes

A secure strong password authentication protocol

An improved one-time password authentication scheme

Smart card based secure authentication and key agreement protocol

A secure biometrics-based remote user authentication scheme for secure data exchange

A secure hash-based strong-password authentication protocol using one-time public-key cryptography

A Four-Party Password-Based Authentication Key Exchange Protocol

PALPAS - PAsswordLess PAssword Synchronization

PALPAS -- PAssword Less PAssword Synchronization