A New Approach for Anonymous Password Authentication

—Anonymous password authentication reinforces password authentication with the protection of user privacy. Considering the increasing concern of individual privacy nowadays, anonymous password authentication represents a promising privacy-preserving authentication primitive. However, anonymous password authentication in the standard setting has several inherent weaknesses, making its practicality questionable. In this paper, we propose a new and efficient approach for anonymous password authentication. Our approach assumes a different setting where users do not register their passwords to the server; rather, they use passwords to protect their authentication credentials. We present a concrete scheme, and get over a number of challenges in securing passwordprotected credentials against off-line guessing attacks. Our experimental results confirm that conventional anonymous password authentication does not scale well, while our new scheme demonstrates very good performance. Keywords-a...

• Type: Conference
• Year: 2009
• Where: ACSAC
• Authors: Yanjiang Yang, Jianying Zhou, Jian Weng, Feng Bao
• Keywords: ACSAC 2009, Anonymous Password Authentication, Authentication Reinforces Password, Password Authentication, Security Privacy