Extending the Scope of CardSpace. / Al-Sinani, Haitham S; Mitchell, Chris J.
Proceedings of the 4th International Conference on Security of Information and Networks, SIN 2011, Sydney, NSW, Australia, November 14-19, 2011. ed. / M A Orgun; A Elci; O B Makarevich; S A Huss; J Pieprzyk; L K Babenko; A G Chefranov; R Shankaran. New York : ACM, 2011. p. 235-238.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Published
Abstract
The recently-proposed PassCard scheme enables CardSpace to be used as a password manager, thereby both improving the usability and security of passwords as well as encouraging CardSpace adoption. However, this scheme does not work with sites using HTTPS, seriously limiting its practicality. In this paper we extend PassCard to support sites using both HTTP and HTTPS. Usernames and passwords are stored in CardSpace personal cards, and these cards can be used to sign on transparently to corresponding websites. PassCard does not require any changes to login servers, default browser security settings or to the CardSpace identity selector; in particular, it does not require websites to support CardSpace. PassCard operates with both the CardSpace and the Higgins identity selectors without any modification. We describe how this new version of PassCard operates, and give security and usability analyses.
| Original language | English |
|---|---|
| Title of host publication | Proceedings of the 4th International Conference on Security of Information and Networks, SIN 2011, Sydney, NSW, Australia, November 14-19, 2011 |
| Editors | M A Orgun, A Elci, O B Makarevich, S A Huss, J Pieprzyk, L K Babenko, A G Chefranov, R Shankaran |
| Place of Publication | New York |
| Publisher | ACM |
| Pages | 235-238 |
| Number of pages | 4 |
| DOIs | |
| Publication status | Published - 2011 |
| Event | 4th International Conference on Security of Information and Networks (SIN 2011) - Sydney, Australia Duration: 14 Nov 2011 → 19 Nov 2011 |
Conference
| Conference | 4th International Conference on Security of Information and Networks (SIN 2011) |
|---|---|
| Country | Australia |
| City | Sydney |
| Period | 14/11/11 → 19/11/11 |
This open access research output is licenced under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License.
ID: 3649556