Smartphone-based secure authenticated session sharing in Internet of Personal Things

Ram Krishnan; Jiwan Ninglekhu

doi:10.1117/12.2086282

11 March 2015 Smartphone-based secure authenticated session sharing in Internet of Personal Things

Ram Krishnan, Jiwan Ninglekhu

Proceedings Volume 9411, Mobile Devices and Multimedia: Enabling Technologies, Algorithms, and Applications 2015; 941109 (2015) https://doi.org/10.1117/12.2086282
Event: SPIE/IS&T Electronic Imaging, 2015, San Francisco, California, United States

Abstract

In the context of password-based authentication, a user can only memorize limited number of usernames and passwords. They are generally referred to as user-credentials. Longer character length of passwords further adds complication in mastering them. The expansion of the Internet and our growing dependency on it, has made it almost impossible for us to handle the big pool of user-credentials. Using simple, same or similar passwords is considered a poor practice, as it can easily be compromised by password cracking tools and social engineering attacks. Therefore, a robust and painless technique to manage personal credentials for websites is desirable. In this paper, a novel technique for user-credentials management via a smart mobile device such as a smartphone in a local network is proposed. We present a secure user-credential management scheme in which user’s account login (username) and password associated with websites domain name is saved into the mobile device’s database using a mobile application. We develop a custom browser extension application for client and use it to import user’s credentials linked with the corresponding website from the mobile device via the local Wi-Fi network connection. The browser extension imports and identifies the authentication credentials and pushes them into the target TextBox locations in the webpage, ready for the user to execute. This scheme is suitably demonstrated between two personal devices in a local network.

Citation Download Citation

Ram Krishnan and Jiwan Ninglekhu "Smartphone-based secure authenticated session sharing in Internet of Personal Things", Proc. SPIE 9411, Mobile Devices and Multimedia: Enabling Technologies, Algorithms, and Applications 2015, 941109 (11 March 2015); https://doi.org/10.1117/12.2086282

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available