TruWallet: Trustworthy and Migratable Wallet-Based Web Authentication

Download Now Date Added: Nov 2009
Format: PDF

Identity theft has fostered to a major security problem on the Internet, in particular stealing passwords for web applications through phishing and malware. The authors present TruWallet, a wallet-based authentication tool that improves previous solutions for protecting web-based authentication. In contrast to other wallet-based solutions, TruWallet provides strong protection for users' credentials and sensitive data by cryptographically binding them to the user's platform configuration based on Trusted Computing technology, an automated login procedure where the server is authenticated independently from (SSL) certificates, thus limiting the possibility of attacks based on hijacked certificates and allowing less dependency on the SSL PKI model, and a secure migration protocol for transferring wallet data to other platforms.