Introducing SmartCards to remote authenticate passwords using Public Key Encryption

Password authentication is one of the most local and remote authentication methods. This can be done by sharing a password between the peers. At the operating system server, the passwords file must be protected against any attack. Actually, almost all operating systems protect this file using one way functions like MD5 or symmetric algorithms such as DES. The UNIX password protection scheme is an example of a security mechanism making use of one way functions. The problem here is that a directed dictionary attack can almost always succeed to break the password using a simple work station. In this paper, we propose a new approach based on asymmetric encryption algorithms and the SmartCards technology to allow the passwords file protection and to prohibit middlemen from having the password during its transit over the connection.