Citation

Chia, Jason and Chin, Ji Jian and Yip, Sook Chin (2022) Pluggable Authentication Module Meets Identity-Based Identification. Communications in Computer and Information Science, 1487. pp. 155-175. ISSN 1865-0929

Text S2021_P117.pdf Restricted to Repository staff only Download (168kB)

Abstract

Pluggable authentication modules (PAMs) primarily provide authentication services to system software on a machine. PAM simplifies the job for both software developers and system administrators by providing a unified method to manage user access to the system. Therefore, software developers do not need to write user authentication subroutines because they can safely rely on well-studied and tested modules to provide the required services. The default authentication mechanism provided by PAM is password-based; while this is sufficient, the security is highly dependent on the strength of the password, which can vary based on the individual or the organization setting the associated password policies. To address this problem, we present an identity-based identification (IBI) module that works as a PAM, specifically for Linux-PAM. The security of the authentication mechanism provided by our work is only dependent on the fixed cryptographic strength of the user keys, which is generally much more secure than passwords. In addition, IBI also has comparatively simpler operations and provides easier ways to manage users compared to existing cryptographic alternatives.

Item Type:	Article
Uncontrolled Keywords:	Access control, Linux security, Identity-based identification, Pluggable authentication modules, System administration
Subjects:	Q Science > QA Mathematics > QA71-90 Instruments and machines > QA75.5-76.95 Electronic computers. Computer science
Divisions:	Faculty of Computing and Informatics (FCI) Faculty of Engineering (FOE)
Depositing User:	Ms Nurul Iqtiani Ahmad
Date Deposited:	23 Feb 2022 03:12
Last Modified:	23 Feb 2022 03:12
URII:	http://shdl.mmu.edu.my/id/eprint/9985

Downloads

Edit (login required)