KYPS
Encyclopedia
KYPS is a free web-based service
that enables users to log into websites, which usually require a username/password combination, using one-time password
s. The main difference between KYPS and similar password management
technologies is that the password is never disclosed to the local computer. This makes KYPS effective against password theft by spyware
or keyloggers, particularly when using public computers such as in an Internet cafe
.
The following figure sketches the login method of KYPS. Note that the user's password is not disclosed to the computer he uses. It is, however, disclosed to the KYPS server. The system therefore requires that the user trusts the provider of the service.
More details about the internal workings of KYPS were published at the CSIE 2009 conference.. KYPS is also featured on Makeuseof
, and heise.de Some of the internal workings of its predecessor, an open-source project called "Impostor", were published at the peer-reviewed GLOBECOM conference in 2004.
Web service
A Web service is a method of communication between two electronic devices over the web.The W3C defines a "Web service" as "a software system designed to support interoperable machine-to-machine interaction over a network". It has an interface described in a machine-processable format...
that enables users to log into websites, which usually require a username/password combination, using one-time password
One-time password
A one-time password is a password that is valid for only one login session or transaction. OTPs avoid a number of shortcomings that are associated with traditional passwords. The most important shortcoming that is addressed by OTPs is that, in contrast to static passwords, they are not vulnerable...
s. The main difference between KYPS and similar password management
Password management
There are several forms of software used to help users or organizations better manage passwords:* Intended for use by a single user:** Password manager software is used by individuals to organize and encrypt many personal passwords...
technologies is that the password is never disclosed to the local computer. This makes KYPS effective against password theft by spyware
Spyware
Spyware is a type of malware that can be installed on computers, and which collects small pieces of information about users without their knowledge. The presence of spyware is typically hidden from the user, and can be difficult to detect. Typically, spyware is secretly installed on the user's...
or keyloggers, particularly when using public computers such as in an Internet cafe
Internet cafe
An Internet café or cybercafé is a place which provides internet access to the public, usually for a fee. These businesses usually provide snacks and drinks, hence the café in the name...
.
The following figure sketches the login method of KYPS. Note that the user's password is not disclosed to the computer he uses. It is, however, disclosed to the KYPS server. The system therefore requires that the user trusts the provider of the service.
More details about the internal workings of KYPS were published at the CSIE 2009 conference.. KYPS is also featured on Makeuseof
Makeuseof
MakeUseOf is a British-based technology & internet apps blog founded by Aibek Esengulov and Kaly Mochoev. The website's primary focus is software, web applications, and useful technology tips, but they have also recently started covering news and gadgets as well...
, and heise.de Some of the internal workings of its predecessor, an open-source project called "Impostor", were published at the peer-reviewed GLOBECOM conference in 2004.