Follow Us on Twitter
Subscribe
Subscribe to our blog's RSS feed.
-
Blog Posts
- Feedback on the Paper on Privacy Postures of Authentication Technologies
- Comparing the Privacy Features of Eighteen Authentication Technologies
- Two Methods of Cryptographic Single Sign-On on Mobile Devices
- Using Cryptographic Authentication without a Cryptographic API on iOS and Android Devices
- Strong Authentication with a Low-Entropy Biometric Key
Our Old Noflail Search Blog
NSF Funding
CONNECT Springboard
Tag Archives: Identity
Feedback on the Paper on Privacy Postures of Authentication Technologies
Many thanks to every one who provided feedback on the paper on privacy postures of authentication technologies which was announced in the previous blog post. The paper was discussed on the Identity Commons mailing list and we also received feedback … Continue reading
Comparing the Privacy Features of Eighteen Authentication Technologies
This blog post motivates and elaborates on the paper Privacy Postures of Authentication Technologies, which we presented at the recent ID360 conference. There is a great variety of user authentication technologies, and some of them are very different from each … Continue reading
Posted in Identity
Tagged Authentication, Identity, OpenID, OpenID Connect, privacy, Shibboleth
Leave a comment
Two Methods of Cryptographic Single Sign-On on Mobile Devices
This is the sixth and last post of a series discussing the paper A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective. To conclude this series I am going to discuss briefly two methods of single sign-on … Continue reading
Using Cryptographic Authentication without a Cryptographic API on iOS and Android Devices
This is the fifth of a series of posts discussing the paper A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective. Everybody agrees that passwords provide very poor security for user authentication, being vulnerable to capture by … Continue reading
Strong Authentication with a Low-Entropy Biometric Key
This is the fourth of a series of posts discussing the paper A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective. Biometrics are a strong form of authentication when there is assurance of liveness, i.e. assurance that … Continue reading
Posted in Identity
Tagged Authentication, Biometric, cryptography, Identity, Mobile, Security
Leave a comment
Defense in Depth of Cryptographic Credentials on a Mobile Device
This is the third of a series of posts discussing the paper A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective. Credentials based on public key cryptography provide much stronger security than ordinary passwords or one-time passwords. … Continue reading
Closed-Loop vs. Open-Loop Authentication
This is the second of a series of posts discussing the paper A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective. In this post I want to take the time to explain and emphasize the distinction made … Continue reading
New Research on Mobile Authentication
This is the first of a series of posts discussing the paper A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective In the next few posts I will be reporting on research that we have been doing … Continue reading
Posted in Identity
Tagged Authentication, Biometric, cryptography, Identity, Mobile, Multifactor
Leave a comment
Report on the NIST Cryptographic Key Management Workshop
This is a belated report on the Cryptographic Key Management Workshop that was held by NIST on September 10-11. Karen Lewison and I went to Washington DC for the workshop, where we presented a talk on techniques for addressing the … Continue reading
Techniques for Implementing Derived Credentials on Mobile Devices
Update. We made a presentation on this topic at the Cryptographic Key Management Workshop that was held on September 10-11 at NIST. We live in the Age of Mobile, and US Federal agencies, like all enterprises, want their employees to … Continue reading
Posted in Identity
Tagged Authentication, Biometric, CAC, Identity, Mobile, Multi-factor, NIST, PIV
Leave a comment