检索结果-内蒙古大学图书馆

A secure and efficient ECC-based user anonymity preserving single sign-on scheme for distributed computer networks

SECURITY AND COMMUNICATION networks 2015年第9期8卷 1732-1751页

作者： Odelu, Vanga Das, Ashok Kumar Goswami, Adrijit Indian Inst Technol Dept Math Kharagpur 721302 W Bengal India Int Inst Informat Technol Ctr Secur Theory & Algorithm Res Hyderabad 500032 Andhra Pradesh India

A user authentication in the distributed computer networks (DCNs) plays a crucial rule to verify whether the user is a legal user and can therefore be granted access to the requested services to that user. In recent years, several RSA-based single sign-on mechanisms have been proposed in DCNs. However, most of them cannot preserve the user anonymity when possible attacks occur. The user devices are usually battery limited (e.g., cellular phones) and the elliptic-curve cryptosystem is much efficient than RSA cryptosystem for the battery-limited devices. In this paper, we aim to propose a new secure elliptic-curve cryptosystem-based single sign-on mechanism for user authentication and key establishment for the secure communications in a DCNs using biometric-based smart card. In our scheme, a user only needs to remember a private password and his or her selected unique identity to authenticate and agree on a high-entropy cryptographic one-time session key with a provider to communicate over untrusted public networks. Through formal and informal security analysis, we show that our scheme prevents other known possible attacks. In addition, we perform simulation on our scheme for the formal security verification using the widely-accepted Automated Validation of Internet Security Protocols and Applications tool. The simulation results ensure that our scheme is secure against replay and man-in-the-middle attacks. Furthermore, our scheme provides high security along with lower computational cost and communication cost, and as a result, our scheme is much suitable for the battery-limited devices as compared to other related RSA-based schemes. Copyright (c) 2014 John Wiley & Sons, Ltd.

关键词： distributed computer networks mutual authentication user anonymity uniqueness key establishment security SSO ECC AVISPA

来源：评论

学校读者我要写书评

暂无评论

Analysis of Objective Trees in Security Management of distributed computer networks of Enterprises and Organizations 1

引用

22nd International Conference on computer networks (CN)

作者： Dolinina, Olga Kushnikov, Vadim Kulakova, Ekaterina Yuri Gagarin State Tech Univ Saratov Dept Appl Informat Technol Saratov 410054 Russia

ISBN: (数字)9783319194196

ISBN: (纸本)9783319194196;9783319194189

The paper contains the formulation of the problem of situational safety management of distributed computer networks, mathematical models and algorithms, which can help to identify quickly and eliminate the causes of security breaches of these networks during their operation. The developed software allows to create a methodological basis for the creation of new information security management systems with cognitive functions, the use of which will improve the reliability and efficiency of the enterprises and organizations.

关键词： Security distributed computer networks Algorithms Mathematical models The automatized system

来源：评论

学校读者我要写书评

暂无评论

Cryptanalysis of some user identification schemes for distributed computer networks

引用

INTERNATIONAL JOURNAL OF COMMUNICATION SYSTEMS 2014年第11期27卷 2909-2917页

作者： Chen, Yu-Chi Liu, Chao-Liang Horng, Gwoboa Natl Chung Hsing Univ Dept Comp Sci & Engn Taichung 402 Taiwan Asia Univ Dept Appl Informat & Multimedia Taichung Taiwan

User identification plays an important role for access control in networks. Recently, Hsu and Chuang proposed a user identification scheme for distributed computer networks, which can also provide key agreement and user anonymity. However, Tsai pointed out the weakness of Hsu-Chuang's scheme and proposed an improved scheme. In this paper, we present two attacks to examine that some user identification schemes have a serious security loophole. Finally, we propose a new user identification scheme, which is more secure than the existing *** (c) 2013 John Wiley & Sons, Ltd.

关键词： security user identification anonymity key distribution distributed computer networks

来源：评论

学校读者我要写书评

暂无评论

Security Analysis of a Single Sign-On Mechanism for distributed computer networks

引用

IEEE TRANSACTIONS ON INDUSTRIAL INFORMATICS 2013年第1期9卷 294-302页

作者： Wang, Guilin Yu, Jiangshan Xie, Qi Univ Wollongong Sch Comp Sci & Software Engn Ctr Comp & Informat Secur Res Wollongong NSW 2522 Australia Hangzhou Normal Univ Sch Informat Sci & Engn Hangzhou 310036 Zhejiang Peoples R China

Single sign-on (SSO) is a new authentication mechanism that enables a legal user with a single credential to be authenticated by multiple service providers in a distributed computer network. Recently, Chang and Lee proposed a new SSO scheme and claimed its security by providing well-organized security arguments. In this paper, however, we demonstrative that their scheme is actually insecure as it fails to meet credential privacy and soundness of authentication. Specifically, we present two impersonation attacks. The first attack allows a malicious service provider, who has successfully communicated with a legal user twice, to recover the user's credential and then to impersonate the user to access resources and services offered by other service providers. In another attack, an outsider without any credential may be able to enjoy network services freely by impersonating any legal user or a nonexistent user. We identify the flaws in their security arguments to explain why attacks are possible against their SSO scheme. Our attacks also apply to another SSO scheme proposed by Hsu and Chuang, which inspired the design of the Chang-Lee scheme. Moreover, by employing an efficient verifiable encryption of RSA signatures proposed by Ateniese, we propose an improvement for repairing the Chang-Lee scheme. We promote the formal study of the soundness of authentication as one open problem.

关键词： Authentication distributed computer networks information security security analysis single sign-on (SSO)

来源：评论

学校读者我要写书评

暂无评论

Designing a shared access memory and its application in data transmission and protection systems 14

Designing a shared access memory and its application in data...

引用

14th International Conference on Advanced Trends in Radioelecrtronics, Telecommunications and computer Engineering (TCSET)

作者： Humenny, Petro Volynskyy, Orest Albanskiy, Ivan Voronych, Artur Ternopil Natl Econ Univ Dept Specialized Comp Syst Ternopol Ukraine IFNTUOG Dept Comp Syst & Networks Ivano Frankivsk Ukraine

ISBN: (纸本)9781538625569

The method of parallel access of a large number of subscribers to a shared memory, based on Galois field codes is developed. This method provides parallel data recording into multiport memory of the subscribers' mailboxes, and also allows for simultaneous parallel reading of any addressed page array. Wireless sensor network architecture that implements vertical information technology of data generation and processing based on entropic method of signal manipulation is presented. Shared access memory is proposed to be used for data protection on the basis of the residue number system.

关键词： distributed computer networks vertical-information technology number-theoretic Galois basis wireless sensor networks residue number system

来源：评论

学校读者我要写书评

暂无评论

Yet Another Method for Heterogeneous Data Fusion and Preprocessing in Proactive Decision Support Systems: distributed Architecture Approach 20th

Yet Another Method for Heterogeneous Data Fusion and Preproc...

引用

20th International Conference on distributed and computer and Communication networks (DCCN)

作者： Van Phu Tran Shcherbakov, Maxim Tuan Anh Nguyen Volgograd State Tech Univ Dept Comp Aided Design Lenin Ave 28 Volgograd 400005 Russia

ISBN: (纸本)9783319668369;9783319668352

In the multi-sensors environment, the crucial issue is collecting data from different sources. The paper considers the problem of data gathering from different data sources in the framework of proactive intelligent decision support systems design. The aim is to provide the invariate access to heterogeneous data stored in a data warehouse for further processing. There are two types of data sources are considered in the paper: machine or sensor data and video streams. We propose an 'on-fly' method of heterogeneous data fusion and preprocessing toward to minimisation of execution time of queries. A proposed method is implemented in the five-layer distributed architecture of the system based on Apache Kafka and Spark Streaming technology. The main conclusion is that in case of heterogeneous data (like video and loged data) and functional requirements for query execution over these data, the distributed data preprocessing might be efficient in comparison with batch processing.

关键词： distributed computer networks Heterogeneous data Data fusion

来源：评论

学校读者我要写书评

暂无评论

SafeProtect: Controlled Data Sharing With User-Defined Policies in Cloud-Based Collaborative Environment

引用

IEEE TRANSACTIONS ON EMERGING TOPICS IN COMPUTING 2016年第2期4卷 301-315页

作者： Thilakanathan, Danan Chen, Shiping Nepal, Surya Calvo, Rafael Univ Sydney Sch Elect & Informat Engn Sydney NSW 2006 Australia Commonwealth Sci & Ind Res Org Data61 Marsfield NSW 2122 Australia

There are many cloud-based applications consumed by users, which encourage data sharing with not only peers, but also new friends and collaborators. Data are increasingly being stored outside the confines of the data owner's machine with little knowledge to the data owner, how and where the data are being stored and used. Hence, there is a strong need for the data owner to have a stronger control over their data, similar to the level of control they possess when the data are stored on their own machine. For instance, when a data owner shares a secret file with a friend, he cannot guarantee what his friend will do with the data. In this paper, we attempt to address this problem by monitoring and preventing unauthorized operations by the data consumer. We present a solution called SafeProtect, which bundles the data owner's data and policy, based on XACML, in an object. SafeProtect enforces the policies set out by the data owner by communicating with the SaaS applications to disable certain commands and/or run a background process monitor for auditability/accountability purposes. We define a protocol that will enable secure data sharing in the cloud and leverage the use of the trusted extension device for authentication purposes.

关键词： Access control cloud distributed computer networks privacy security policy monitoring

来源：评论

学校读者我要写书评

暂无评论

Implementation of Lavia-Manning Algorithm for Network Topology Design

Implementation of Lavia-Manning Algorithm for Network Topolo...

引用

21st Telecommunications Forum (TELFOR)

作者： Puzovic, S. Milicevic, S. Bozilovic, B. Tesanovic-Stojanovic, B. Vlatacom Doo Belgrade 11000 Serbia

ISBN: (纸本)9781479914203

In this work the problem of network topology design is considered. It is crucial that network continues to work even if some nodes or links fail. Survivability criterion poses a demand for a certain number of distinct paths between each pair of nodes in the network. Diameter of the network is the maximum number of hops in a path between any two non-adjacent nodes and to bound maximum delay in the network, this criteria is also taken into account. We are presenting an implementation of the algorithm that satisfies criterion of survivability, bounded delay and has minimum cost. Finally we give design examples with the concrete networks.

关键词： distributed computer networks network planning survivable networks

来源：评论

学校读者我要写书评

暂无评论

Implementation of Lavia-Manning Algorithm for Network Topology Design

Implementation of Lavia-Manning Algorithm for Network Topolo...

引用

Telecommunications Forum Telfor

作者： S. Puzovic S. Milicevic B. Bozilovic B. Tesanovic-Stojanovic Vlatacom d.o.o Vlatacom d.o.o.

ISBN: (纸本)9781479914180

关键词： distributed computer networks Network planning Survivable networks

来源：评论

学校读者我要写书评

暂无评论

Practical anonymous user authentication scheme with security proof

引用

computerS & SECURITY 2008年第5-6期27卷 216-223页

作者： Chien, Hung-Yu Natl Chi Nan Univ Dept Informat Management Nantou Hsien Taiwan

An authenticated key distribution scheme preserving user anonymity is important to those e-commerce applications where user anonymity is required or desirable. However, the previous works on this issue have security flaws. This paper shows the security weaknesses of a recently published work, and then proposes our new scheme, which not only overcomes the weaknesses but also improves the computational performance. The security of the proposed scheme is rigorously examined in a modified Bellare-Rogaway model. (c) 2008 Elsevier Ltd. All rights reserved.

关键词： Smart card User identification Authentication Key distribution Anonymity distributed computer networks

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：