Name
Abstract | ||
|---|---|---|
In this paper, we propose a novel integrated authentication and access control scheme using smart cards. A list of accessible resources with privileges is encrypted in the smart card issued to the user. Without storing access control information, a server can authenticate each user, realize resources to be accessed, and determine access privileges. We propose the use of card identifiers to prevent privilege elevation attacks and to protect the privacy of access requests. Our scheme has the following merits: low communication and computational cost, no access control information in the server, prevention of privilege elevation attack, multiple-access requests, privacy protection of access requests, mutual authentication, and session key agreement |
Year | DOI | Venue |
|---|---|---|
2005 | 10.1109/ICPADS.2005.80 | ICPADS (2) |
Keywords | Field | DocType |
smart cards,session key agreement,card identifiers,access privilege,cryptography,privilege elevation attack prevention,access request privacy,access control information,smart card,access request,efficient authentication,access privileges,authorisation,mutual authentication,multiple-access requests,privilege elevation attack,novel integrated authentication,storing access control information,message authentication,access control scheme,authentication,privacy,reflection,information management,access control | Mutual authentication,Computer access control,Authentication,Message authentication code,Computer science,Computer security,Cryptography,Computer network,Smart card,Encryption,Access control | Conference |
Volume | ISSN | ISBN |
2 | 1521-9097 | 0-7695-2281-5 |
Citations | PageRank | References |
8 | 0.81 | 11 |
Authors | ||
2 | ||
Name | Order | Citations | PageRank |
|---|---|---|---|
| Yen-Cheng Chen | 1 | 152 | 15.38 |
| Lo-Yao Yeh | 2 | 185 | 12.90 |