IDKeeper: A Web Password Manager with Roaming Capability Based on USB Key

摘要

This paper presents an architecture that affords Web users a trusted ID/Password manager with roaming capability named IDKeeper. The design objectives of this solution are (i) to protect web users from phishing attacks especially malware-based phishing and web spoofing; (ii) to provide an easy-to-use system with roaming capability so that web user can focus on their transaction rather that security and they can use their credential information everywhere. At first, design principles are given based on the analysis of the existing attacks today. Secondly, the solution overview and usage overview are presented. Thirdly, we give the software architecture and the particular implementation. At last, the advantages of IDKeeper are given in conclusion. With IDKeeper, IDs and passwords are stored on users' USB Key, coupling ID/Password to users, not to their machines or to the third-party servers.