检索结果-内蒙古大学图书馆

distributed authentication of program integrity verification in wireless sensor networks

ACM TRANSACTIONS ON INFORMATION AND SYSTEM SECURITY 2008年第3期11卷 1–35页

作者： Chang, Katharine Shin, Kang G. Univ Michigan Dept Elect Engn & Comp Sci Real Time Comp Lab Comp Sci & Engn Div Ann Arbor MI 48109 USA

Security in wireless sensor networks has become important as they are being developed and deployed for an increasing number of applications. The severe resource constraints in each sensor make it very challenging to secure sensor networks. Moreover, sensors are usually deployed in hostile and unattended environments and hence are susceptible to various attacks, including node capture, physical tampering, and manipulation of the sensor program. Park and Shin [2005] proposed a soft tamper-proofing scheme that verifies the integrity of the program in each sensor device, called the program integrity verification (PIV), in which sensors authenticate PIV servers (PIVSs) using centralized and trusted third-party entities, such as authentication servers (ASs). This article presents a distributed authentication protocol of PIVSs (DAPP) without requiring the commonly used ASs. DAPP uses the Blundo scheme [Blundo et al. 1992] for sensors and PIVSs to establish pairwise keys and for PIVSs to authenticate one another. We also present a protocol for PIVSs to cooperatively detect and revoke malicious PIVSs in the network. We implement and evaluate both DAPP and PIV on Mica2 Motes and laptops, showing that DAPP reduces the sensors' communication traffic in the network by more than 90% and the energy consumption on each sensor by up to 85%, as compared to the case of using a centralized AS for authenticating PIVSs. We also analyze the security of DAPP under various attack models, demonstrating its capability in dealing with diverse types of attacks.

关键词： algorithms design security distributed authentication program integrity verification node revocation wireless sensor networks

来源：评论

学校读者我要写书评

暂无评论

distributed authentication in the Cloud Computing Environment 15th

Distributed Authentication in the Cloud Computing Environmen...

引用

15th International Conference on Algorithms and Architectures for Parallel Processing (ICA3PP)

作者： Liu, Yanzhu Li, Zhi Sun, Yuxia Univ Sci & Technol Sch Comp & Commun Engn Beijing 100083 Peoples R China

ISBN: (纸本)9783319271613;9783319271606

The cloud computing is considered as the next-generation of IT technology that can provide various elastic and scalable IT services in pay-as-you-go. This technology has been used by worldwide companies to improve their business performance. Therefore, authentication of both clients and services is a significant issue for the trust and security of the cloud computing. At present, to protect the security of the cloud, many ideas have been proposed. In this paper, we present DSA protocol concentrated on authentication of clients. It is an improved protocol based on Kerberos, which prevents password guessing attack by using dynamic session key. We also solved the problem of service availability by introducing two additional messages in the scheme.

关键词： Cloud computing distributed authentication Password guessing attack Kerberos Ticket

来源：评论

学校读者我要写书评

暂无评论

A Blockchain-Based Secure distributed authentication Scheme for Internet of Vehicles

引用

IEEE ACCESS 2024年 12卷 81471-81482页

作者： Ma, Zhanfei Jiang, Jing Wei, Hui Wang, Bisheng Luo, Wenli Luo, Haoye Liu, Dongxiang Baotou Normal Univ Sch Informat Sci & Technol Baotou 014010 Peoples R China Inner Mongolia Univ Sci & Technol Sch Digital & Intelligence Ind Baotou 014010 Peoples R China

authentication for the Internet of Vehicles (IoV) is essential for safe IoV connection. However, because of the peculiar structure of IoV, current authentication schemes heavily rely on Road Side Units (RSUs). An excessive number of RSUs will make it difficult to synchronize updates, which will make system authentication inefficient overall and prevent the reuse of authentication results. Based on this, this paper proposes a blockchain-based secure distributed authentication scheme for IoV. First, data processing and storage are decentralized to the edge of the network to reduce the communication delay and response time with the trusted authority (TA). Second, in the IoV authentication process, smart contract technology is used to achieve automatic triggering of the authentication process, and an optimized Practical Byzantine Fault Tolerant Consensus (PBFT) algorithm is designed to add the authentication information to the blockchain ledger so that the authentication results can be reused. Finally, this paper performs formal security verification and informal security analysis using and Real-Or-Random (ROR) oracle model and AVISPA tool. In addition, this paper performs a detailed evaluation of computation cost and communication cost and uses SUMO for simulation verification. The security analysis and performance evaluation show that the scheme meets the security requirements of the IoV while having less communication and computation cost.

关键词： authentication Blockchains Security Smart contracts Telematics Automobiles Servers Internet of Vehicles Consensus control Blockchain distributed authentication consensus

来源：评论

学校读者我要写书评

暂无评论

A distributed authentication Scheme Based on Smart Contract for Roaming Service in Mobile Vehicular Networks

引用

IEEE TRANSACTIONS ON VEHICULAR TECHNOLOGY 2022年第5期71卷 5284-5297页

作者： Xue, Kaiping Luo, Xinyi Ma, Yongjin Li, Jian Liu, Jianqing Wei, David S. L. Univ Sci & Technol China Sch Cyber Sci & Technol Hefei 230027 Anhui Peoples R China Univ Sci & Technol China Dept Elect Engn & Informat Sci Hefei 230027 Anhui Peoples R China Univ Alabama Dept Elect & Comp Engn Huntsville AL 35899 USA Fordham Univ Comp & Informat Sci Dept Bronx NY 10458 USA

Secure and real-time communication is an essential condition in mobile vehicular networks, and this requires secure authentication and seamless access enabled by roaming services. As a security inspector, roaming authentication ensures that legitimate users can access the network securely. However, today's roaming authentication protocols authenticate users with the help of centralized authentication servers, leading to the risk of the single point of failure and roaming fraud. The massive device access in SO networks further exacerbates the losses when problems occur. In light of it, we propose a decentralized fraud-proof roaming authentication framework based on blockchain. We leverage smart contracts to implement a roaming authentication protocol, including user/AP registration, authentication, and revocation. For higher efficiency, we utilize the Bloom filter for the revocation process. In addition, we design an unforgeable and undeniable billing scheme based on hash chain technology. Security and performance analysis show that the proposed roaming authentication scheme can provide the required security features while incurring an acceptable authentication delay.

关键词： Blockchain distributed authentication mobile vehicular network roaming authentication smart contract

来源：评论

学校读者我要写书评

暂无评论

Dynamic distributed authentication Scheme for Wireless LAN-Based Mesh Networks

引用

International Conference on Information Networking (ICOIN 2007)

作者： Lee, Insun Lee, Jihoon Arbaugh, William Kim, Daeyoung Samsung Adv Inst Technol Comm & Conncet Lab POBox 111 Suwon 449716 South Korea Univ Maryland College Pk MD 20742 USA Informat & Comminicat Univ Daejeon South Korea

ISBN: (纸本)9783540895237

Wireless LAN systems have been deployed for wireless internet services for hot spots, home, or offices. Recently, WLAN-Based Mesh Networking is developed with the benefit of easy deployment and easy configuration. Due to the characteristic of distributed environment, Wireless Mesh Networks(WMNs) need a new authentication scheme which allows multi-hop communication. In this paper, we propose a distributed authentication method which significantly eases the management burden and reduces the storage space on mesh points, thus enables the secure and easy deployment of WMNs.

关键词： Wireless Mesh network distributed authentication WLAN

来源：评论

学校读者我要写书评

暂无评论

Efficient distributed authentication method with local proxy for Wireless Mesh Networks

Efficient distributed authentication method with local proxy...

引用

IEEE Wireless Communications and Networking Conference

作者： Lee, Insun Lee, Jihoon Kirn, Daeyoung Samsung AIT Commun Lab Seoul South Korea Informat Commun Univ Daejeon South Korea

ISBN: (纸本)9781424406586

WLAN-Based Mesh Networking is being developed with the benefit of easy deployment and easy configuration to overcome the limitation of a single- hop communication in terms of coverage, cost, capacity, scalability, etc. Wireless Mesh Networks(WMN)' distributed and dynamic characteristic needs an distributed authentication scheme which supports the mobility of the Mesh Points(MP). In this paper, we propose an efficient distributed authentication method which significantly eases the management burden, reduces the storage space on mesh points, and support the mobility of the MP.

关键词： wireless mesh network distributed authentication mobility WLAN

来源：评论

学校读者我要写书评

暂无评论

Two-factor distributed authentication Scheme for Cloud Storage 9

Two-factor Distributed Authentication Scheme for Cloud Stora...

引用

9th International Conference on Computer and Communication Systems (ICCCS)

作者： Han, Yunxia Xu, Chunxiang Li, Shanshan Lu, Jingjie Univ Elect Sci & Technol China Sch Comp Sci & Engn Chengdu Peoples R China Zhongnan Univ Econ & Law Sch Informat Engn Wuhan Peoples R China

ISBN: (纸本)9798350350227;9798350350210

distributed authentication plays a crucial role in cloud storage, requiring users to authenticate their identity to a set of key management servers. This process guarantees that only authenticated users gain access to cryptographic keys stored in these servers for decrypting outsourced data. However, existing distributed authentication schemes rely solely on passwords, posing a critical weakness due to the recent surge in password-based attacks. Once passwords are compromised, adversaries can impersonate users, gaining unauthorized access to key management servers and acquiring cryptographic keys. To address this vulnerability, a recent multi-factor scheme has been proposed that introduces a distributed authentication mechanism for each popular factor such as passwords, Universal 2nd Factor (U2F), and email. Users could select multiple factors and utilize their corresponding mechanisms when authenticating to servers. Nevertheless, a simple combination of these authentication mechanisms incurs substantial overheads. In this paper, we propose a combined verification mechanism for passwords and U2F, allowing servers to efficiently verify both factors. Based on the mechanism, we present a two-factor distributed authentication for cloud storage, dubbed TDAC. In TDAC, users could authenticate to key management servers through a single password entry and a touch on their U2F. Experiments show that TDAC is efficient in terms of computation and communication overhead.

关键词： Cloud storage distributed authentication passwords U2F.

来源：评论

学校读者我要写书评

暂无评论

Design and Optimization of distributed authentication Mechanism for Equipment Support Information Network

引用

JOURNAL OF INTERNET TECHNOLOGY 2015年第7期16卷 1291-1297页

作者： Yan, Jie Lu, Yu Chen, Li-yun Mech Engn Coll Dept Equipment Command & Management Beijing Peoples R China Mech Engn Coll Dept Informat Engn Beijing Peoples R China

Because of the threats existing in the identity authentication for equipment support information network, a cluster-based distributed authentication mechanism and an optimal design method for distributed CA are proposed. Compared with many traditional clustering methods, the clustering method in this paper divides the nodes into one cluster whose information exchange is frequent and whose tasks are the same, which reduces the communication spending between the clusters, improves the network efficiency effectively and realizes the convenient management for the nodes. The threshold signature scheme for distributed CA in the distributed authentication mechanism is designed based on SM2 elliptic curve digital signature algorithm. The optimal design for distributed CA is to set the optimal value of the threshold for distributed CA to enhance the security and the availability of distributed authentication service. The definition of the Secure Service Success Probability (SSSP) of distributed CA is given based on the definition of the Service Success Probability (SSP) of distributed CA. The optimal value of the threshold for distributed CA is the value which makes the SSSP of distributed CA reach the maximum. The relation between the SSSP of distributed CA and the threshold value is given. The optimal value of the threshold is got according to the relation. The proposed method provides the reference for the design and optimization of distributed authentication mechanism for equipment support information network.

关键词： Equipment support information network distributed authentication Threshold signature Clustering Threshold optimization

来源：评论

学校读者我要写书评

暂无评论

distributed Hardware-Assisted authentication and Key Agreement Protocol for Internet of Things 21

Distributed Hardware-Assisted Authentication and Key Agreeme...

引用

IEEE 21st Consumer Communications and Networking Conference (CCNC)

作者： Alshaeri, Abdulaziz Younis, Mohamed Univ Maryland Blatimore Cty Dept Comp Sci & Elect Engn Baltimore MD 21228 USA

ISBN: (纸本)9798350304572

Physically Unclonable Functions (PUFs) are lightweight hardware primitives that provide an effective secure-by-design solution for mutual authentication of the resource-constrained Internet of Things (IoT) devices. By embedding PUFs in the design of each IoT device, the identity of devices could be validated using unique device fingerprints, known as challenge and response pairs (CRPs). Unfortunately, PUF-based authentication protocols are susceptible to CRP disclosure which could be exploited to model the PUF and allow impersonation of the associated device by either an external adversary or compromised nodes. This paper presents a distributed Unclonable Hardware-assisted authentication and Key Agreement Protocol (DUHAP). DUHAP presents a novel and effective mitigation for CRP disclosure, PUF modeling, and device impersonation. In particular, the PUF responses are obfuscated using varying salt that is dependent on the verifier and the actual PUF response. Such an identity- and response-based obfuscation technique withstands CRPs disclosure attempts by a compromised node or multiple colluding nodes through reverse engineering. The security of DUHAP is analyzed using a prominent protocol validation tool, and its resiliency against modeling is validated using data collected from a popular PUF cryptanalysis toolbox.

关键词： IoT distributed authentication Key Agreement Physically Unclonable Function

来源：评论

学校读者我要写书评

暂无评论

Secure, ID Privacy and Inference Threat Prevention Mechanisms for distributed Systems

引用

IEEE ACCESS 2023年 11卷 3766-3780页

作者： Aljohani, Tahani Hamad Zhang, Ning Princess Nourah Bint Abdul Rahman Univ Coll Comp & Informat Sci Riyadh 11564 Saudi Arabia Univ Manchester Sch Comp Sci Manchester M13 9PL England

This paper investigates facilitating remote collection of a patient's data in distributed system while protecting the security of the data, preserving the privacy of the patient's ID, and preventing inference attack. The paper presents a novel framework called SPID stand for a Secure, ID Privacy, and Inference Threat Prevention Mechanisms for distributed Systems. In designing this framework, we make the following novel contributions. The SPID presents a novel architecture that supports the use of a distributed set of servers owned by different service providers. The SPID allows the patient to access these servers using certificates generated by the patient. The SPID allows the patient to select one server to be the home server, and select a number of servers to be the foreign servers. The patient uses the foreign servers to upload data. The home server is responsible for collecting the patient's data from the foreign servers and sending them to the healthcare provider. The SPID proposes a method for efficient verification of each request from the patient without searching in the server's database for the verification key. This is done by using some of the Elliptic Curves Cryptography (ECC) properties. The SPID has been analyzed using a bench-marking tool and evaluated using queuing theory. The evaluation results indicate an efficient performance when the number of servers increases. We uses Shannon entropy method to measure the likelihood of the inference attack.

关键词： Servers Medical services Privacy Data privacy authentication Prognostics and health management Blockchains Encryption Elliptic curves Inference Entropy Public key Security ID~privacy distributed authentication elliptic curves inference attack

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：