The OFFPAD : Requirements and Usage

Kent Varmedal (1) , Henning Klevger (1) , Joakim Hovlandsvag (1) , Andun Josang (1) , Johanne Vincent (2) , Laurent Miralabé (3)

1 Department of Informatics [Oslo]
2 Equipe SAFE - Laboratoire GREYC - UMR6072
3 TazTag

Strong authentication for online service access typically requires some kind of hardware device for generating dynamic access credentials that are often used in combination with static passwords. This practice have the side effect that users fill up their pockets with more and more devices and their heads with more and more passwords. This situation becomes increasinlgy difficult to manage which in turn degrades the usability of online services. In order to cope with this situation users often adopt insecure ad hoc practices that enable them to practically manage their different identities and credentials. This paper explores how one single device can be used for authentication of user to service providers and server to users, as well as provide a range of other security services.

Domaines: Cryptographie et sécurité [cs.CR]

Kent Varmedal, Henning Klevger, Joakim Hovlandsvag, Andun Josang, Johanne Vincent, et al.. The OFFPAD : Requirements and Usage. International Conference on Network and System Security (NSS 2013), Jun 2013, Madrid, Spain. 14 p. ⟨hal-01004214⟩