OpenID Connect (OIDC) is a Single Sign-On (SSO) protocol that allows users to authenticate
to various Relying Parties (RPs) via an Identity Provider (IdP). The main drawback of SSO is …

Identity Management Systems (IMS) allow users to prove characteristics about themselves to
multiple service providers. IMS evolved from impractical, site-by-site authentication, to …

Despite the latest efforts to foster the adoption of privacy-enhancing Attribute-Based
Credential (p-ABC) systems in electronic services, those systems are not yet broadly …

Single sign-on (SSO) allows users to authenticate to third-party applications through a
central identity provider. Despite their wide adoption, deployed SSO systems suffer from …

Single Sign-On (SSO) shifts the crucial authentication process on a website to to the
underlying SSO protocols and their correct implementation. To strengthen SSO security …

Federated authentication, such as Google ID, enables users to conveniently access multiple
websites using a single login credential. Despite this convenience, securing federated …

Single sign-on (SSO) allows a user to maintain only the credential at the identity provider
(IdP), to login to numerous RPs. However, SSO introduces extra privacy threats, compared …

The advent of end-to-end encrypted (E2EE) messaging and backup services has brought
new challenges for usable authentication. Compared to regular web services, the nature of …

Credential compromise is hard to detect and hard to mitigate. To address this problem, we
present larch, an accountable authentication framework with strong security and privacy …

Machine-to-Machine (M2M) communication is communication between computers without a
human user involved. This is a very common paradigm whenever automated tasks are …