Abstract:Password-based user authentication service is widely used in Internet. Most of the password-based authentication protocols are constructed under the single-server structure that a authencitation server stores cleartext passwords or verification data derived from password and responds to users' authentication request.The security of single-server authentication system is very fragile. In particular, when the server is comprimised, all of users' verification data is exposed to the attacker. Nowadays, development of mobile Internet leads the demand of authentication on roaming device. In this scenario, easily memorable short password and simple secret is accepted by most people despite of its security limitation. The utilization of short password worsens the situation of single-server authentication protocol. Attackers controlling the system can launch off-line dictionary attack from internal of server side to obtain users' original password.Multi-server authentication protocols can improve the security of verification data by distributed storing data on the cluster. This approach increases the difficulty of internal attack and guarantees security even if a portion of servers in the cluster are controlled by adversary. But in practice, There are some problems in existing multi-server protocols. For example, communicating with multiple servers brings extra network and computational burden to client device.To address these problems, in this paper we propose a novel password-based multi-server authenication protocol which not only require less computation on client device but remain functional and secure even if adversary controls some servers and forces them collude to attack our protocol.

A Distributed Expansible Authentication Model Based on Kerberos

Inter-domain authentication scheme for Pervasive Computing Environments

Solution to VPN and Authentication System

A Scalable Authentication Model Based on Public Keys

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Distributed Certification Application Via a Trusted Dealer

Distributed Model Based on Data Partition and Load Balance Algorithm

An Enhanced Kerberos Protocol with Non-Interactive Zero-Knowledge Proof

Scalable Byzantine Fault Tolerant Public Key Authentication for Peer-to-Peer Networks

A Distributed Login Model Based on CHORD

Poster: Towards Fully Distributed User Authentication with Blockchain.

Constructing authentication web in cloud computing

An enhanced Kerberos protocol based on one-time password

An Improved Kerberos Protocol Based on Diffie-Hellman-DSA Key Exchange.

A Decentralized Rbac Model And Its User-Role Administration

A Distributed Login Framework for Semi-Structured Peer-to-Peer Networks.

A Threshold Multi-server Protocol for Password-Based Authentication.

Active Network Architecture Based on Extended Services Router

Cryptanalysis and Improvement of a Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments

Contructing Authentication Web in Cloud Computing

A Novel Threshold Distributed Authentication Scheme Using Bilinear Pairings