{"id":"https://openalex.org/W4387623735","doi":"https://doi.org/10.1109/tifs.2023.3324326","title":"Hardening Password-Based Credential Databases","display_name":"Hardening Password-Based Credential Databases","publication_year":2023,"publication_date":"2023-10-13","ids":{"openalex":"https://openalex.org/W4387623735","doi":"https://doi.org/10.1109/tifs.2023.3324326"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2023.3324326","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3324326","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011880298","display_name":"Yaqing Song","orcid":"https://orcid.org/0009-0004-8966-2779"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yaqing Song","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064473849","display_name":"Chunxiang Xu","orcid":"https://orcid.org/0000-0002-5411-7621"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]},{"id":"https://openalex.org/I3018263800","display_name":"Huzhou University","ror":"https://ror.org/04mvpxy20","country_code":"CN","type":"education","lineage":["https://openalex.org/I3018263800"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunxiang Xu","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","Yangtze Delta Region Institute (Huzhou), University of Electronic Science and Technology of China, Huzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5411-7621","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"Yangtze Delta Region Institute (Huzhou), University of Electronic Science and Technology of China, Huzhou, China","institution_ids":["https://openalex.org/I3018263800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029752627","display_name":"Yuan Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]},{"id":"https://openalex.org/I3018263800","display_name":"Huzhou University","ror":"https://ror.org/04mvpxy20","country_code":"CN","type":"education","lineage":["https://openalex.org/I3018263800"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Zhang","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","Yangtze Delta Region Institute (Huzhou), University of Electronic Science and Technology of China, Huzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-7909-9845","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"Yangtze Delta Region Institute (Huzhou), University of Electronic Science and Technology of China, Huzhou, China","institution_ids":["https://openalex.org/I3018263800"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011782952","display_name":"Shiyu Li","orcid":"https://orcid.org/0000-0002-1504-5055"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shiyu Li","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-1504-5055","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5011880298"],"corresponding_institution_ids":["https://openalex.org/I150229711"],"apc_list":null,"apc_paid":null,"fwci":4.0358,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.94563366,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"19","issue":null,"first_page":"469","last_page":"484"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.8722010254859924},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8348129987716675},{"id":"https://openalex.org/keywords/credential","display_name":"Credential","score":0.8329411745071411},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7136169672012329},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.49424460530281067},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.49208158254623413},{"id":"https://openalex.org/keywords/authentication-server","display_name":"Authentication server","score":0.46344542503356934},{"id":"https://openalex.org/keywords/password-policy","display_name":"Password policy","score":0.44238853454589844},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.44095608592033386},{"id":"https://openalex.org/keywords/salt","display_name":"Salt (chemistry)","score":0.42535603046417236},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.3955899178981781},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.3484669327735901},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.32219934463500977},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.29235219955444336},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.06427133083343506}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.8722010254859924},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8348129987716675},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.8329411745071411},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7136169672012329},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.49424460530281067},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.49208158254623413},{"id":"https://openalex.org/C2777331311","wikidata":"https://www.wikidata.org/wiki/Q784561","display_name":"Authentication server","level":3,"score":0.46344542503356934},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.44238853454589844},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.44095608592033386},{"id":"https://openalex.org/C2776371256","wikidata":"https://www.wikidata.org/wiki/Q12370","display_name":"Salt (chemistry)","level":2,"score":0.42535603046417236},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3955899178981781},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.3484669327735901},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32219934463500977},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.29235219955444336},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.06427133083343506},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C147789679","wikidata":"https://www.wikidata.org/wiki/Q11372","display_name":"Physical chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2023.3324326","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3324326","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5799999833106995}],"awards":[{"id":"https://openalex.org/G2782668500","display_name":null,"funder_award_id":"62272091","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8878790248","display_name":null,"funder_award_id":"2022ZDZX0038","funder_id":"https://openalex.org/F4320333335","funder_display_name":"Sichuan Province Science and Technology Support Program"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320333335","display_name":"Sichuan Province Science and Technology Support Program","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W417364168","https://openalex.org/W1237159827","https://openalex.org/W1486852732","https://openalex.org/W1549671385","https://openalex.org/W1552897331","https://openalex.org/W1610688607","https://openalex.org/W1967308747","https://openalex.org/W1968854550","https://openalex.org/W2000638898","https://openalex.org/W2015218975","https://openalex.org/W2030112111","https://openalex.org/W2054482077","https://openalex.org/W2056711010","https://openalex.org/W2079262069","https://openalex.org/W2086553822","https://openalex.org/W2113446256","https://openalex.org/W2123382811","https://openalex.org/W2126960670","https://openalex.org/W2141420453","https://openalex.org/W2163898713","https://openalex.org/W2168967576","https://openalex.org/W2190581264","https://openalex.org/W2406790903","https://openalex.org/W2536625930","https://openalex.org/W2538793708","https://openalex.org/W2616051826","https://openalex.org/W2754914709","https://openalex.org/W2891698757","https://openalex.org/W2901658766","https://openalex.org/W2915352631","https://openalex.org/W2949495942","https://openalex.org/W2980890754","https://openalex.org/W2989868125","https://openalex.org/W3003490236","https://openalex.org/W3007412953","https://openalex.org/W3096870392","https://openalex.org/W3103303311","https://openalex.org/W3154781724","https://openalex.org/W3207119887","https://openalex.org/W4291653259","https://openalex.org/W4313451681","https://openalex.org/W4362654073","https://openalex.org/W6630155293","https://openalex.org/W6713188869","https://openalex.org/W6743460260","https://openalex.org/W6767171021","https://openalex.org/W6769469031","https://openalex.org/W6803239583","https://openalex.org/W6874837697"],"related_works":["https://openalex.org/W2969720675","https://openalex.org/W1844709308","https://openalex.org/W2359085393","https://openalex.org/W2156083280","https://openalex.org/W3034387269","https://openalex.org/W2025554913","https://openalex.org/W2237863779","https://openalex.org/W2019897613","https://openalex.org/W2526316819","https://openalex.org/W72859687"],"abstract_inverted_index":{"We":[0,144],"propose":[1],"a":[2,25,29,32,36,46,63,152],"protection":[3],"mechanism":[4],"for":[5],"password-based":[6,89,141],"credential":[7,21,65,131],"databases":[8],"maintained":[9],"by":[10],"service":[11,33,125],"providers":[12],"against":[13],"leakage,":[14],"dubbed":[15],"PCDL.":[16],"In":[17],"PCDL,":[18,50],"each":[19],"authentication":[20,90,142],"is":[22,83,136,159],"derived":[23],"from":[24,62],"user\u2019s":[26],"password":[27],"and":[28,150,161],"salt,":[30],"where":[31],"provider":[34,126],"employs":[35],"set":[37],"of":[38,73,81,148],"key":[39,75],"servers":[40],"to":[41,96,128],"share":[42],"the":[43,59,74,111,124,130,146],"salt":[44],"in":[45],"threshold":[47],"way.":[48],"With":[49],"an":[51,118],"external":[52],"adversary":[53],"cannot":[54],"derive":[55],"any":[56,98],"information":[57],"about":[58],"underlying":[60],"passwords":[61],"compromised":[64],"database,":[66],"even":[67],"if":[68],"he":[69],"can":[70],"compromise":[71],"some":[72],"servers.":[76],"The":[77],"most":[78],"prominent":[79],"manifestation":[80],"PCDL":[82,86,115,135,149,158],"transparency:":[84],"integrating":[85],"with":[87,139],"existing":[88,140],"schemes":[91],"does":[92,103],"not":[93,104],"require":[94],"users":[95],"perform":[97],"additional":[99],"operation":[100],"(and":[101],"thereby":[102],"change":[105],"users\u2019":[106],"interaction":[107],"patterns),":[108],"yet":[109],"enhances":[110],"security":[112,147],"guarantee":[113],"significantly.":[114],"serves":[116],"as":[117],"independent":[119],"component":[120],"only":[121],"deployed":[122],"on":[123],"side":[127],"harden":[129],"database.":[132],"As":[133],"such,":[134],"well":[137],"compatible":[138],"schemes.":[143],"analyze":[145],"conduct":[151],"performance":[153],"evaluation,":[154],"which":[155],"shows":[156],"that":[157],"secure":[160],"efficient.":[162]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":6}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}