Abstract: In a security environment featuring subjects and objects, we consider an alternative to the classical password paradigm. In this alternative, a key includes a password, an object identifier, and an authorization. A master password is associated with each object. A key is valid if the password in that key descends from the master password by using a validity relation expressed in terms of a symmetric-key algorithm. We analyse a number of security problems. For each problem, a solution is presented and discussed. In certain cases, extensions to the original key paradigm are introduced. The problems considered include the revocation of access authorizations; bounded keys expressing limitations on the number of iterated utilizations of the same key to access the corresponding object; repositories, which are objects aimed at storing keys, possibly organized into hierarchical structures; and the merging of two keys into a single key featuring a composite authorization that includes the access rights in the two keys.

Lanfranco Lopriore. “Password Systems: Problems and Solutions”. International Journal of Advanced Computer Science and Applications (IJACSA) 13.6 (2022). http://dx.doi.org/10.14569/IJACSA.2022.01306113

@article{Lopriore2022,
title = {Password Systems: Problems and Solutions},
journal = {International Journal of Advanced Computer Science and Applications},
doi = {10.14569/IJACSA.2022.01306113},
url = {http://dx.doi.org/10.14569/IJACSA.2022.01306113},
year = {2022},
publisher = {The Science and Information Organization},
volume = {13},
number = {6},
author = {Lanfranco Lopriore}
}