The Web Security Password Authentication based the Single-block Hash Function

Nowadays, many websites allow or require users to use their e-mail addresses either as identity or for other purposes. Although username-based identity problems resulting from users’ behaviours have been a research focus for quite some time, the serious issues of using e-mail address as identity and the associated online behaviours of users have not been well investigated. In this paper, we discuss and analyse security and privacy problems resulting from using e-mail address as identity via well-designed user behaviour survey and by investigating websites’ design schemes. Our results illustrate that using e-mail address as identity poses high security and privacy risks. This is mainly because of the multiple usages of e-mail addresses and users’ improper online habits. Moreover, we discuss drawbacks of existing solutions for e-mail address as identity and related password problems, and present potential solutions that may be used to secure online identity management systems in future.

/pdf/analysing-security-and-privacy-issues-of-using-e-mail-1vyibi2rln.pdf

Analysing security and privacy issues of using e-mail address as identity

A mobile terminal voting system based on android platform is presented and implemented to solve the problems of traditional voting and e-voting system in this paper. Joining the static-password mechanism and the dynamic-password mechanism, a double identity authentication scheme is presented based on the symmetric algorithm, which conquers challenge-response protocol weakness. It achieves double identity authentication, avoids replay attack and personate attack. Analysis results showed that the proposed scheme provided higher efficiency compared to the existing schemes in the network environment, and enhances the security of the mobile terminal voting system.

Research of Identity Authentication of the Mobile Terminal Voting System

Some common onetime password authentication protocols are analyzed.A practical efficient onetime password authentication protocol is presented which based on the symmetric algorithm,which conquers common challengeresponse protocol weakness and can achieve mutual authentication and avoid replay attack and personating attack.It also can boost up the security of the application security system by integrating with it.

Wu He

Papers

An Efficient One-time Password Authentication