Publikationen

Autor	Horsch, M.; Braun, J.; Wiesmaier, A.; Schaaf, J.; Baumöller, C.
Datum	2012
Art	Conference Proceedings
Abstrakt	Authentication using user name and password bears various risks such as eavesdropping by malware. Authentication mechanisms based on smart cards avoid such attacks by requiring possession of the card, but are often not applicable due to missing card readers. The direct connection between reader and user system allows for attacks e.g. when typing in the PIN via the user system. We present a process which allows conducting an authentication completely decoupled from the user system. This solves the problem with the availability of card readers. Additionally, the user input is no longer at risk of being eavesdropped on by malware on the user system.
In	D-A-CH Security 2012, p.186-197
Publisher	syssec
Schlüssel	Bra12PushDienst

Verteilte Dienstnutzung mit dem neuen Personalausweis