Authentication

Password Management - Paper by M. Bishop, 1991. Discusses problems of password selection and password management, and identifies relevant techniques. [PDF]
http://seclab.cs.ucdavis.edu/papers/pdfs/mb-91.pdf

Remote User Authentication in Libraries - A collection of resources for libraries and universities. Includes links to software and some links of interest to non-librarians.
http://library.smc.edu/rpa.htm

SecureUser.net - Providers of tools to e-commerce developers. Technology explanation and case studies.
http://www.secureuser.net/

iisPROTECT - Functions with Internet Information Server to secure web sites. Includes live demo.
http://www.iisprotect.com/

M-Tech Information Technology, Inc. - ID-Synch, identity management software for managing user administration processes. Product information, customers, press releases and contact details.
http://mtechit.com/

IIS User Authentication Tutorial - Information on various methods for WWW password protection using Internet Information Server (IIS). Text-based tutorial with some screenshots.
http://www.authenticationtutorial.com/

Theory of Identification and Authentication - History and development of mechanisms and techniques.
http://www.geocities.com/SiliconValley/Garage/3323/cspage.html

Dos and Don'ts of Client Authentication on the Web - Paper by Kevin Fu, Emil Sit, Kendra Smith, and Nick Feamster. In the Proceedings of the 10th USENIX Security Symposium, Washington, D.C., August 2001. [PDF]
http://www.pdos.lcs.mit.edu/papers/webauth:sec10.pdf

Unisys - Makers of several related products. Includes rationale as well as usage information.
http://www.unisys.com/

A Proactive Password Checker - Paper by M. Bishop, 1991. The author describes a technique, and a mechanism, to allow users to select passwords which to them are easy to remember but to others would be very difficult to guess. [Postscript]
http://seclab.cs.ucdavis.edu/papers/mb91c.ps

Intertrust Technologies Corporation - Develops general purpose digital rights management platform which serves as foundation for providers of digital information, technology and commerce services to participate in a global system for digital commerce. (Nasdaq: ITRU).
http://www.intertrust.com/

Pluggable Authentication Modules - Sun's official PAM documentation. Programmer documentation and source code.
http://www.sun.com/software/solaris/pam/

Secure Remote Passwords - Software integrates into existing networked applications. Secure telnet and FTP available. Open source. User and technical documentation as well as source code.
http://srp.stanford.edu/

Finally Software - Enterprise security solutions based on PKI and Kerberos. Also offer a secure terminal emulator for connecting to Unix servers from Windows. Product information and downloadable evaluation software.
http://www.finallysoftware.com/

RSA Security - Products include token-based one time password systems and single sign on systems. Site contains information on security.
http://www.rsasecurity.com/

Open Systems Management - Password synchronization and role based access control across UNIX, Windows NT and resident applications. Site contains FAQs.
http://www.osmcorp.com/

SAFLINK - Offer a range of identity management solutions based on tokens, smartcards and biometrics. Headquarters in Bellevue, WA.
http://www.saflink.com/

Flicks Software - Software password protects web content (Windows NT / 2000). Free trial downloads available.
http://www.flicks.com

NMA, Inc. - ZSentry two-factor authentication solution. Product information, white papers and contact details.
http://www.nma.com/

Vasco - Makers of both software and hardware systems. Demos, case studies and product information.
http://www.vasco.com/

BioPassword - A software-based technology that learns and verifies unique typing patterns. Includes an introduction to biometrics and keyboard dynamics.
http://www.biopassword.com/

I/O Software - Provider of software solutions, including biometric solutions. Product descriptions and technology licensing terms.
http://www.iosoftware.com/

Proginet Enterprise Software - Password synchronization, enterprise-wide access control management and managed file transfer software.
http://www.proginet.com/