Citation

Lee, Kok-wah and Ewe, Hong-tat (2007) Multiple hashes of single key with passcode for multiple accounts. Journal of Zhejiang University SCIENCE A, 8 (8). pp. 1183-1190. ISSN 1673-565X

Text (Multiple hashes of single key with passcode for multiple accounts) 1053.pdf Restricted to Repository staff only Download (0B)

Abstract

A human's e-life needs multiple offline and online accounts. It is a balance between usability and security to set keys or passwords for these multiple accounts. Password reuse has to be avoided due to the domino effect of malicious administrators and crackers. However, human memorability constrains the number of keys. Single sign-on server, key hashing, key strengthening and petname system are used in the prior arts to use only one key for multiple online accounts. The unique site keys are derived from the common master secret and specific domain name. These methods cannot be applied to offline accounts such as file encryption. We invent a new method and system applicable to offline and online accounts. It does not depend on HTTP server and domain name, but numeric 4-digit passcode, key hashing, key strengthening and hash truncation. Domain name is only needed to resist spoofing and phishing attacks of online accounts.

Item Type:	Article
Subjects:	T Technology > T Technology (General) Q Science > QA Mathematics > QA71-90 Instruments and machines > QA75.5-76.95 Electronic computers. Computer science
Divisions:	Faculty of Engineering and Technology (FET)
Depositing User:	Ms Suzilawati Abu Samah
Date Deposited:	27 Sep 2011 02:44
Last Modified:	25 Feb 2014 03:10
URII:	http://shdl.mmu.edu.my/id/eprint/3028

Downloads

Edit (login required)