Using CardSpace as a Password-based Single Sign-on System. / Al-Sinani, Haitham S; Mitchell, Chris J.

Department of Mathematics, Royal Holloway, University of London, 2011. 24 p. (Technical Report Series; No. RHUL-MA-2011-14).

Research output: Book/ReportOther report

Unpublished

Standard

Using CardSpace as a Password-based Single Sign-on System. / Al-Sinani, Haitham S; Mitchell, Chris J.

Department of Mathematics, Royal Holloway, University of London, 2011. 24 p. (Technical Report Series; No. RHUL-MA-2011-14).

Research output: Book/ReportOther report

Harvard

Al-Sinani, HS & Mitchell, CJ 2011, Using CardSpace as a Password-based Single Sign-on System. Technical Report Series, no. RHUL-MA-2011-14, Department of Mathematics, Royal Holloway, University of London.

APA

Al-Sinani, H. S., & Mitchell, C. J. (2011). Using CardSpace as a Password-based Single Sign-on System. (Technical Report Series; No. RHUL-MA-2011-14). Department of Mathematics, Royal Holloway, University of London.

Vancouver

Al-Sinani HS, Mitchell CJ. Using CardSpace as a Password-based Single Sign-on System. Department of Mathematics, Royal Holloway, University of London, 2011. 24 p. (Technical Report Series; RHUL-MA-2011-14).

Author

Al-Sinani, Haitham S ; Mitchell, Chris J. / Using CardSpace as a Password-based Single Sign-on System. Department of Mathematics, Royal Holloway, University of London, 2011. 24 p. (Technical Report Series; RHUL-MA-2011-14).

BibTeX

@book{88bb290b0e5b4dfda2b62f704645edf1,
title = "Using CardSpace as a Password-based Single Sign-on System",
abstract = "In this paper we propose a simple scheme that allows CardSpace to be used as a password-based single sign-on system, thereby both improving the usability and security of passwords as well as encouraging CardSpace adoption. We describe three related approaches to achieving password-based single sign-on using CardSpace. In each case users are able to store their credentials for a set of websites in a personal card, and use it to seamlessly single sign on to all these websites. The approaches do not require any changes to login servers or to the CardSpace identity selector and, in particular, they donot require websites to support CardSpace. We also describe three proof-of-concept prototypes and give usability, security and performance analyses.",
keywords = "CardSpace, Single sign-on , Browser Extension",
author = "Al-Sinani, {Haitham S} and Mitchell, {Chris J}",
year = "2011",
month = "8",
day = "23",
language = "English",
series = "Technical Report Series",
publisher = "Department of Mathematics, Royal Holloway, University of London",
number = "RHUL-MA-2011-14",

}

RIS

TY - BOOK

T1 - Using CardSpace as a Password-based Single Sign-on System

AU - Al-Sinani, Haitham S

AU - Mitchell, Chris J

PY - 2011/8/23

Y1 - 2011/8/23

N2 - In this paper we propose a simple scheme that allows CardSpace to be used as a password-based single sign-on system, thereby both improving the usability and security of passwords as well as encouraging CardSpace adoption. We describe three related approaches to achieving password-based single sign-on using CardSpace. In each case users are able to store their credentials for a set of websites in a personal card, and use it to seamlessly single sign on to all these websites. The approaches do not require any changes to login servers or to the CardSpace identity selector and, in particular, they donot require websites to support CardSpace. We also describe three proof-of-concept prototypes and give usability, security and performance analyses.

AB - In this paper we propose a simple scheme that allows CardSpace to be used as a password-based single sign-on system, thereby both improving the usability and security of passwords as well as encouraging CardSpace adoption. We describe three related approaches to achieving password-based single sign-on using CardSpace. In each case users are able to store their credentials for a set of websites in a personal card, and use it to seamlessly single sign on to all these websites. The approaches do not require any changes to login servers or to the CardSpace identity selector and, in particular, they donot require websites to support CardSpace. We also describe three proof-of-concept prototypes and give usability, security and performance analyses.

KW - CardSpace

KW - Single sign-on

KW - Browser Extension

M3 - Other report

T3 - Technical Report Series

BT - Using CardSpace as a Password-based Single Sign-on System

PB - Department of Mathematics, Royal Holloway, University of London

ER -