SYNCHRONIZED TOKEN GENERATOR SYSTEM

Bibliographic Details
Main Author: Nalli, Sehar K.
Language:English
Published: Miami University / OhioLINK 2006
Online Access:http://rave.ohiolink.edu/etdc/view?acc_num=miami1146151257
id ndltd-OhioLink-oai-etd.ohiolink.edu-miami1146151257
record_format oai_dc
spelling ndltd-OhioLink-oai-etd.ohiolink.edu-miami11461512572021-08-03T05:39:44Z SYNCHRONIZED TOKEN GENERATOR SYSTEM Nalli, Sehar K. This thesis discusses a novel methodology to protect a user’s credentials in a centralized LDAP authentication environment. The work discusses the design and implementation of the Synchronized Token Generator System that gives the user a temporary token they can use when authenticating to untrusted third-parties such as service providers. This methodology addresses the risk when users give their credentials to a service provider. In LDAP environment it is necessary to give the service provider the user’s actual credentials since the service provider sends these credentials to the central server for authentication. The service providers have plaintext access to the username/password pair (the user’s credentials) even when transmissions are encrypted and the service providers can easily store a copy of the user’s credentials. This research looked at existing solutions to this problem and found that most require that the client programs participate in a secure credential exchange system. This work proposes a solution that does not require modifications to the client or service provider programs. The result is a Synchronized Token Generator System that automatically generates temporary tokens that the users use in place of their password during the authentication process. 2006-04-28 English text Miami University / OhioLINK http://rave.ohiolink.edu/etdc/view?acc_num=miami1146151257 http://rave.ohiolink.edu/etdc/view?acc_num=miami1146151257 unrestricted This thesis or dissertation is protected by copyright: all rights reserved. It may not be copied or redistributed beyond the terms of applicable copyright laws.
collection NDLTD
language English
sources NDLTD
author Nalli, Sehar K.
spellingShingle Nalli, Sehar K.
SYNCHRONIZED TOKEN GENERATOR SYSTEM
author_facet Nalli, Sehar K.
author_sort Nalli, Sehar K.
title SYNCHRONIZED TOKEN GENERATOR SYSTEM
title_short SYNCHRONIZED TOKEN GENERATOR SYSTEM
title_full SYNCHRONIZED TOKEN GENERATOR SYSTEM
title_fullStr SYNCHRONIZED TOKEN GENERATOR SYSTEM
title_full_unstemmed SYNCHRONIZED TOKEN GENERATOR SYSTEM
title_sort synchronized token generator system
publisher Miami University / OhioLINK
publishDate 2006
url http://rave.ohiolink.edu/etdc/view?acc_num=miami1146151257
work_keys_str_mv AT nallisehark synchronizedtokengeneratorsystem
_version_ 1719423230871076864