Abstract
In this paper we propose a novel scheme that allows Windows CardSpace to be used as a password manager, thereby improving the usability and security of password use as well as potentially encouraging CardSpace adoption. Usernames and passwords are stored in personal cards, and these cards can be used to sign on transparently to corresponding websites. The scheme does not require any changes to login servers or to the CardSpace identity selector and, in particular, it does not require websites to support CardSpace. We describe how the scheme operates, and give details of a proof-of-concept prototype. Security and usability analyses are also provided. © 2010 IFIP International Federation for Information Processing.
Cite
CITATION STYLE
Al-Sinani, H. S., & Mitchell, C. J. (2010). Using CardSpace as a password manager. In IFIP Advances in Information and Communication Technology (Vol. 343 AICT, pp. 18–30). Springer New York LLC. https://doi.org/10.1007/978-3-642-17303-5_2
Register to see more suggestions
Mendeley helps you to discover research relevant for your work.
