KeyAuth:为大众带来公钥认证
KeyAuth: Bringing Public-key Authentication to the Masses
摘要:
密码是一种脆弱的、不充分的、不安全的用户身份验证工具,在用于保护对网络资源和服务的访问时尤其充满问题。在许多情况下,密码提供了一种虚假的安全感。创建既安全又安全的密码(即,攻击者很难猜到)和人类很容易记住,充其量是一个矛盾的任务,因为这两个标准是截然相反的。幸运的是,有一个更安全和用户友好的替代方案。公钥密码学提供了一种无需密码即可识别和验证用户的方法。KeyAuth是一种通用的公钥认证实现,旨在取代基于密码的认证,并通过增强常用认证机制的可用性来显着提高网络可访问资源的安全性。KeyAuth是一种独立于应用程序、语言、操作系统和协议的公钥身份验证服务。
英文摘要:
Passwords are a fragile, inadequate, and insecure tool for authenticating users, and are especially fraught with problems when used to secure access to network resources and services. In many cases, passwords provide a false sense of security. Creating passwords which are both secure (i.e., hard for attackers to guess) and easy for humans to remember is, at best, a paradoxical task because these two criteria are diametrically opposed. Fortunately, a far more secure and user-friendly alternative is available. Public-key cryptography provides a means of both identifying and authenticating users without the need for passwords. KeyAuth is a generic and universal implementation of public-key authentication aimed at supplanting password-based authentication and significantly improving the security of network accessible resources by enhancing the usability of frequently used authentication mechanisms. KeyAuth is an application-, language-, operating system-, and protocol-independent public-key authentication service.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。