Authentication and Lookup for Network Services

Daniel J. Buehrer ； Tzu-Yang Wang

《International Journal of Electronic Commerce Studies》 5卷1期 (2014/06) Pp. 81-90

https://doi.org/10.7903/ijecs.1040

並列摘要

Sharing on networks is common nowadays. There are many sites, and users typically must register for an account on each site. Sometimes, sites or services can communicate or share data with each other or cooperate to perform some functions together. Such intercommunication between sites uses a shared network. However, some sites may not be trusted, and the user’s own data, especially passwords, might be exposed or fraudulent. Authentication is needed in order to both identify users and to hide user information via some authorization policies. In this paper, we describe a method for authentication via sessions. This authentication procedure is able to provide authentication of proxies and also allow concealed passwords. It is a little like OpenID^1 for websites, which prevents hacks and attacks from malicious servers and allows ordinary network connections. Moreover, it also allows proxy-proving, which permits only registered servers to be agents of a requesting user to request data from other servers.

並列關鍵字

Sessional Authentication ； Sharing Network ； Sign-Up

參考文獻

D. Recordon, and D. Reed, OpenID 2.0: A platform for user-centric identity management. In M. Winslett and A. Goto (Eds.), Proceedings of the second ACM workshop on Digital identity management (p11-16). New York, NY, USA: ACM Press. 2006. http://dx.doi.org/10.1145/1179529.1179532.

E. Maler, and D. Reed, The venn of identity: Options and issues in federated identity management. IEEE Security and Privacy, 6(2), p16-23, 2008. http://dx.doi.org/10.1109/MSP.2008.50

H. Wang, C. Fan, S. Yang, J. Zou, and X. Zhang, A new secure OpenID authentication mechanism using one-time password (OTP). Paper Presented at the 7th International Conference on Wireless Communications, Networking and Mobile Computing (WiCOM), Wuhan, September 23-25, 2011. http://dx.doi.org/10.1109/wicom.2011.6040525

E. Hammer-Lahav, The OAuth 1.0 protocol, IETF. Retrieved on January 18, 2013, from http://tools.ietf.org/html/rfc5849

T. Berners-Lee, J. Hendler, O. Lassila, The semantic web. Scientific American, 284(5), p34-43, 2001.