Title :
The Security Limitations of SSO in OpenID
Author :
Oh, Hyun-Kyung ; Jin, Seung-Hun
Author_Institution :
Inf. Security Eng., Korea Univ. of Sci. & Technol., Seoul
Abstract :
As the Internet becomes a way of social life, there are lots of accounts which a user has to manage. To receive the Web service, people have to register each Web site. It is the OpenID to resolve these burdensome. The OpenID provides the single sign-on service which a user can be authenticated in several Web sites by submitting the password of OpenID to authentication server only once. In this paper, we analyze the single sign-on in OpenID and show an experiment of vulnerability of OpenID.
Keywords :
Web services; Web sites; telecommunication security; Internet; OpenID; SSO; Web service; Web site; authentication server; security limitations; single sign-on service; Authentication; Authorization; Engineering management; Identity management systems; Information security; Internet; Intrusion detection; Technology management; Uniform resource locators; Web services; Cookie-based authentication system; ID Management system; OpenID; Single Sign-On(SSO);
Conference_Titel :
Advanced Communication Technology, 2008. ICACT 2008. 10th International Conference on
Conference_Location :
Gangwon-Do
Print_ISBN :
978-89-5519-136-3
DOI :
10.1109/ICACT.2008.4494089
