Applicability of Smart Cards to Network User Authentication.
Marjan Krajewski, John C. Chipchak, David A. Chodorow, Jonathan T. Trostle · 1994
ABSTRACT: This paper addresses security issues associated with authenticating users to system services in distributed information systems. Its focus is the presentation of an approach for augmenting the Kerberos network user identification and authentication protocol through the integration of emerging smart card technology. Our conclusions indicate that the security of Kerberos-based network authentication can be substantially enhanced by employing a smart card as a trusted desktop coprocessor. Two critical aspects of information system security are the application of access controls based on a user's authorizations and the creation of an audit trail based on a user's actions.[l] Both are dependent on the accurate authentication of users to guard against the threat of intruders masquerading as valid users. Traditionally,