Robust and secure password and key change method

Article type: Research Article

Authors: Hauser, Ralf^{a; 1} | Janson, Philippe^a | Tsudik, Gene^{a; 2} | Van Herreweghen, Els^a | Molva, Refik^b

Affiliations: [a] IBM Research Laboratory, CH-8803 Rüschlikon, Switzerland, E-mail: [email protected], [email protected] | [b] EURECOM Institute, Sophia Antipolis, F-06560 Valbonne, France, E-mail: [email protected]

Note: [1] Currently at: McKinzie & Co., Switzerland, E-mail: [email protected].

Note: [2] Currently at: Information Sciences Institute, Marina del Rey, California, USA, E-mail: [email protected].

Abstract: This paper discusses issues and idiosyncrasies associated with changing passwords and keys in distributed computer systems. Current approaches are often complicated and fail to provide the desired level of security and fault tolerance. A novel and very simple approach to changing passwords/keys is presented and analyzed. It provides a means for human users and service programs to change passwords and keys in a robust and secure fashion.

DOI: 10.3233/JCS-1996-4106

Journal: Journal of Computer Security, vol. 4, no. 1, pp. 97-111, 1996