SecurePass: Guarding sensitive information from untrusted machines

Thumbnail Image

Files

413.pd.pdf (247.54 KB)

Links to Files

https://ebiquity.umbc.edu/paper/html/id/411/SecurePass-Guarding-sensitive-information-from-untrusted-machines

Permanent Link

http://hdl.handle.net/11603/12162

Collections

UMBC Student Collection

Author/Creator

Author/Creator ORCID

Date

2008-09-08

Type of Work

technical reports
Text

Department

Program

Citation of Original Publication

Rights

This item is likely protected under Title 17 of the U.S. Copyright Law. Unless on a Creative Commons license, for uses protected by Copyright Law, contact the copyright holder or the author.

Subjects

security
mobile computing
UMBC Ebiquity Research Group
SecurePass
sensitive information
untrusted machines

Abstract

We propose a proxy based solution to secure web access from un-trusted machines. Traditional proxy based solutions require constant out of band communication with the proxy. However, our system does not require constant communication with the user. Instead, the user carries a mobile device capable of performing cryptographic operations to generate onetime passwords. These passwords are then used to authenticate to the proxy. We have developed a prototype system and tested its performance in terms of security and response time.