Using OTP with PAKE: An Optimized Implementation of a Synchronization Window

Author

MBarka, M.B. ; Granboulan, Louis ; Krief, Francine

Author_Institution

Cryptolog Int., Paris, France

fYear

2011

fDate

7-10 Feb. 2011

Firstpage

1

Lastpage

5

Abstract

Authentication has been a cornerstone of computer security for decades. A considerable number of authentication protocols have been specified and implemented. This paper compares most common families of client-server authentication protocols and shows the benefits of the combined use of One Time Password (OTP) with Password Authenticated Key Exchange (PAKE) protocols. Then, the paper addresses a particular issue inherited from this combination which consists in the synchronization between the client and the server. We propose an optimized implementation for a synchronization mechanism based on the use of a synchronization window. The optimized synchronization has been implemented and the simulation results show that our proposal significantly reduces the computations needed at the client side to select the current password.

Keywords

client-server systems; computer network security; cryptography; protocols; synchronisation; client authentication; client server authentication protocols; computer security; one time password; password authenticated key exchange; synchronization window; Authentication; Indexes; Protocols; Servers; Spyware; Synchronization;

fLanguage

English

Publisher

ieee

Conference_Titel

New Technologies, Mobility and Security (NTMS), 2011 4th IFIP International Conference on

Conference_Location

Paris

ISSN

2157-4952

Print_ISBN

978-1-4244-8705-9

Electronic_ISBN

2157-4952

Type

conf

DOI

10.1109/NTMS.2011.5720659

Filename

5720659