Um protocolo de autenticação de senhas em ambiente cifrado para acesso a base de dados

Abstract

The objetive of this dissertation is to present a password authentication protocol to access the database denominated Cripto-SRP, where all the phases of password transmission and verifications are done in a ciphered environment. On the user authentication, the password and the username are transmitted and presented by database in ciphered way. The storaged data on the logins server are also ciphered, and its manipulation is executed without the necessity of decipher them. The proposed protocol is based in the SRP protocol and increase the security of the transmission, verification and login storage.