{"id":"https://openalex.org/W1552194903","doi":"https://doi.org/10.1007/s10207-016-0348-7","title":"Secure modular password authentication for the web using channel bindings","display_name":"Secure modular password authentication for the web using channel bindings","publication_year":2016,"publication_date":"2016-09-21","ids":{"openalex":"https://openalex.org/W1552194903","doi":"https://doi.org/10.1007/s10207-016-0348-7","mag":"1552194903"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-016-0348-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-016-0348-7","pdf_url":"https://link.springer.com/content/pdf/10.1007%2Fs10207-016-0348-7.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007%2Fs10207-016-0348-7.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027942565","display_name":"Mark Manulis","orcid":"https://orcid.org/0000-0002-1512-9670"},"institutions":[{"id":"https://openalex.org/I28290843","display_name":"University of Surrey","ror":"https://ror.org/00ks66431","country_code":"GB","type":"education","lineage":["https://openalex.org/I28290843"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mark Manulis","raw_affiliation_strings":["Surrey Centre for Cyber Security, Department of Computer Science, University of Surrey, Guildford, UK","Surrey Centre for Cyber Security, Department of Computer Science, University of Surrey, Guildford, UK#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Surrey Centre for Cyber Security, Department of Computer Science, University of Surrey, Guildford, UK","institution_ids":["https://openalex.org/I28290843"]},{"raw_affiliation_string":"Surrey Centre for Cyber Security, Department of Computer Science, University of Surrey, Guildford, UK#TAB#","institution_ids":["https://openalex.org/I28290843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034733246","display_name":"Douglas Stebila","orcid":"https://orcid.org/0000-0001-9443-3170"},"institutions":[{"id":"https://openalex.org/I98251732","display_name":"McMaster University","ror":"https://ror.org/02fa3aq29","country_code":"CA","type":"education","lineage":["https://openalex.org/I98251732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Douglas Stebila","raw_affiliation_strings":["McMaster University, Hamilton, ON, Canada","[McMaster University, Hamilton, Canada]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"McMaster University, Hamilton, ON, Canada","institution_ids":["https://openalex.org/I98251732"]},{"raw_affiliation_string":"[McMaster University, Hamilton, Canada]","institution_ids":["https://openalex.org/I98251732"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060026650","display_name":"Franziskus Kiefer","orcid":"https://orcid.org/0009-0003-3632-4613"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Franziskus Kiefer","raw_affiliation_strings":["Mozilla, Berlin, Germany","Mozilla, Berlin, Germany#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mozilla, Berlin, Germany","institution_ids":[]},{"raw_affiliation_string":"Mozilla, Berlin, Germany#TAB#","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002519878","display_name":"Nick Denham","orcid":null},"institutions":[{"id":"https://openalex.org/I160993911","display_name":"Queensland University of Technology","ror":"https://ror.org/03pnv4752","country_code":"AU","type":"education","lineage":["https://openalex.org/I160993911"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Nick Denham","raw_affiliation_strings":["Queensland University of Technology, Brisbane, Australia","Queensland University of Technology; Brisbane Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Queensland University of Technology, Brisbane, Australia","institution_ids":["https://openalex.org/I160993911"]},{"raw_affiliation_string":"Queensland University of Technology; Brisbane Australia","institution_ids":["https://openalex.org/I160993911"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5060026650"],"corresponding_institution_ids":[],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":2.2647,"has_fulltext":true,"cited_by_count":20,"citation_normalized_percentile":{"value":0.89538644,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"15","issue":"6","first_page":"597","last_page":"620"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9696000218391418,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8255869150161743},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.725115180015564},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5911111831665039},{"id":"https://openalex.org/keywords/authentication-protocol","display_name":"Authentication protocol","score":0.5521557927131653},{"id":"https://openalex.org/keywords/transport-layer-security","display_name":"Transport Layer Security","score":0.518819272518158},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4869157075881958},{"id":"https://openalex.org/keywords/authenticated-key-exchange","display_name":"Authenticated Key Exchange","score":0.47814854979515076},{"id":"https://openalex.org/keywords/s/key","display_name":"S/KEY","score":0.444273978471756},{"id":"https://openalex.org/keywords/challenge\u2013response-authentication","display_name":"Challenge\u2013response authentication","score":0.41204166412353516},{"id":"https://openalex.org/keywords/key-exchange","display_name":"Key exchange","score":0.3107362985610962},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.23040935397148132},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.18211323022842407}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8255869150161743},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.725115180015564},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5911111831665039},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.5521557927131653},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.518819272518158},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4869157075881958},{"id":"https://openalex.org/C2777572472","wikidata":"https://www.wikidata.org/wiki/Q4825878","display_name":"Authenticated Key Exchange","level":5,"score":0.47814854979515076},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.444273978471756},{"id":"https://openalex.org/C131129157","wikidata":"https://www.wikidata.org/wiki/Q1059963","display_name":"Challenge\u2013response authentication","level":4,"score":0.41204166412353516},{"id":"https://openalex.org/C99674996","wikidata":"https://www.wikidata.org/wiki/Q1414155","display_name":"Key exchange","level":4,"score":0.3107362985610962},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.23040935397148132},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.18211323022842407}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1007/s10207-016-0348-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-016-0348-7","pdf_url":"https://link.springer.com/content/pdf/10.1007%2Fs10207-016-0348-7.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},{"id":"pmh:oai:alma.44SUR_INST:11138672690002346","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4210197018","display_name":"Open Research (University of Surrey)","issn_l":"2688-268X","issn":["2688-268X","2688-3988"],"is_oa":false,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"","raw_type":""},{"id":"pmh:oai:eprints.qut.edu.au:76270","is_oa":true,"landing_page_url":"https://eprints.qut.edu.au/76270/3/MSD14-pow-20130806.xpi","pdf_url":null,"source":{"id":"https://openalex.org/S4306402607","display_name":"QUT ePrints (Queensland University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I160993911","host_organization_name":"Queensland University of Technology","host_organization_lineage":["https://openalex.org/I160993911"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Security Standardisation Research: First International Conference, SSR 2014, Proceedings [Lecture Notes in Computer Science, Volume 8893]","raw_type":"Chapter in Book, Report or Conference volume"},{"id":"pmh:oai:eprints.qut.edu.au:151388","is_oa":true,"landing_page_url":"http://purl.org/au-research/grants/arc/DP130104304","pdf_url":null,"source":{"id":"https://openalex.org/S4306402607","display_name":"QUT ePrints (Queensland University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I160993911","host_organization_name":"Queensland University of Technology","host_organization_lineage":["https://openalex.org/I160993911"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"International Journal of Information Security","raw_type":"Contribution to Journal"},{"id":"pmh:oai:epubs.surrey.ac.uk:811830","is_oa":false,"landing_page_url":"http://epubs.surrey.ac.uk/811830/6/SRI_deposit_agreement.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400680","display_name":"Surrey Research Insight Open Access (The University of Surrey)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I28290843","host_organization_name":"University of Surrey","host_organization_lineage":["https://openalex.org/I28290843"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":{"id":"doi:10.1007/s10207-016-0348-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-016-0348-7","pdf_url":"https://link.springer.com/content/pdf/10.1007%2Fs10207-016-0348-7.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5299999713897705}],"awards":[{"id":"https://openalex.org/G5344411064","display_name":null,"funder_award_id":"MA 4957","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G6953541449","display_name":null,"funder_award_id":"EP/N002717/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G7308915296","display_name":"Internet authentication protocols: theory and practice","funder_award_id":"DP130104304","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"}],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"},{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W1552194903.pdf","grobid_xml":"https://content.openalex.org/works/W1552194903.grobid-xml"},"referenced_works_count":43,"referenced_works":["https://openalex.org/W138104976","https://openalex.org/W203500824","https://openalex.org/W1481508603","https://openalex.org/W1495444061","https://openalex.org/W1509298722","https://openalex.org/W1526070463","https://openalex.org/W1550000763","https://openalex.org/W1593324857","https://openalex.org/W1595293097","https://openalex.org/W1759759811","https://openalex.org/W1959803714","https://openalex.org/W1975344666","https://openalex.org/W1982774175","https://openalex.org/W2000245583","https://openalex.org/W2010608681","https://openalex.org/W2042923641","https://openalex.org/W2100442755","https://openalex.org/W2107506969","https://openalex.org/W2112578244","https://openalex.org/W2112617468","https://openalex.org/W2113698290","https://openalex.org/W2121186966","https://openalex.org/W2124926080","https://openalex.org/W2126193037","https://openalex.org/W2135654420","https://openalex.org/W2149445117","https://openalex.org/W2153041122","https://openalex.org/W2157279580","https://openalex.org/W2157604883","https://openalex.org/W2160343382","https://openalex.org/W2164428090","https://openalex.org/W2236598634","https://openalex.org/W2295478238","https://openalex.org/W2298971592","https://openalex.org/W2482813613","https://openalex.org/W2513866241","https://openalex.org/W2580339477","https://openalex.org/W2766703967","https://openalex.org/W2950941169","https://openalex.org/W2952409621","https://openalex.org/W3121587263","https://openalex.org/W3213806235","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W3000282663","https://openalex.org/W2021337165","https://openalex.org/W2377075426","https://openalex.org/W2387383457","https://openalex.org/W2076891850","https://openalex.org/W1991761575","https://openalex.org/W4232214274","https://openalex.org/W1505930949","https://openalex.org/W3090197073","https://openalex.org/W2090058510"],"abstract_inverted_index":{"Secure":[0],"protocols":[1,83,177],"for":[2,88],"password-based":[3,52],"user":[4],"authentication":[5,54,125,168],"are":[6,84,178,208],"well-studied":[7],"in":[8,47,86,131,198],"the":[9,20,30,69,75,113,140,175,182,185,189,193],"cryptographic":[10],"literature":[11],"but":[12],"have":[13,44],"failed":[14],"to":[15,24,29,74,78,100,112],"see":[16],"wide-spread":[17],"adoption":[18],"on":[19,97,128,206,233],"internet;":[21],"most":[22],"proposals":[23],"date":[25],"require":[26],"extensive":[27],"modifications":[28,111],"Transport":[31],"Layer":[32],"Security":[33],"(TLS)":[34],"protocol,":[35,161,173],"making":[36],"deployment":[37],"challenging.":[38],"Recently,":[39],"a":[40,49,59,89,120,136,158,166,199,211,224],"few":[41],"modular":[42],"designs":[43],"been":[45],"proposed":[46],"which":[48,144],"cryptographically":[50],"secure":[51,114,159,186,200],"mutual":[53],"protocol":[55,71,116],"is":[56,72],"run":[57],"inside":[58],"confidential":[60,149],"(but":[61],"not":[62],"necessarily":[63],"authenticated)":[64],"channel":[65,77,115,150,160],"such":[66,124,162],"as":[67,163,210,217,219],"TLS;":[68],"password":[70,167],"bound":[73,179],"established":[76],"prevent":[79],"active":[80],"attacks.":[81],"Such":[82],"useful":[85],"practice":[87],"variety":[90],"of":[91,123,139,184],"reasons:":[92],"security":[93,142],"no":[94,110],"longer":[95],"relies":[96],"users\u2019":[98],"ability":[99],"validate":[101],"server":[102],"certificates":[103],"and":[104,148,223],"can":[105,229],"potentially":[106],"be":[107,231],"implemented":[108],"with":[109,165],"library.":[117],"We":[118,153],"provide":[119],"systematic":[121],"study":[122],"protocols.":[126],"Building":[127],"recent":[129],"advances":[130],"modeling":[132],"TLS,":[133,164],"we":[134,145],"give":[135],"formal":[137],"definition":[138],"intended":[141],"goal,":[143],"call":[146],"password-authenticated":[147,170],"establishment":[151],"(PACCE).":[152],"show":[154],"generically":[155],"that":[156,228],"combining":[157],"or":[169,192],"key":[171],"exchange":[172],"where":[174],"two":[176],"together":[180],"using":[181],"transcript":[183],"channel\u2019s":[187],"handshake,":[188],"server\u2019s":[190,194],"certificate,":[191],"domain":[195],"name,":[196],"results":[197],"PACCE":[201],"protocol.":[202],"Our":[203],"prototypes":[204],"based":[205],"TLS":[207],"available":[209],"cross-platform":[212],"client-side":[213],"Firefox":[214],"browser":[215],"extension":[216],"well":[218],"an":[220],"Android":[221],"application":[222,227],"server-side":[225],"web":[226],"easily":[230],"installed":[232],"servers.":[234]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":1}],"updated_date":"2026-08-18T07:49:30.821534","created_date":"2025-10-10T00:00:00"}