An Improvement of VeriSign’s Key Roaming Service Protocol

Kim, Jeeyeon; Kwon, Hyunjo; Park, Haeryong; Kim, Seungjoo; Won, Dongho

doi:10.1007/3-540-45068-8_53

Cited by 1 publication

(2 citation statements)

References 9 publications

(9 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The choice which store to add in each step depends on the benefit for adding the store (cf. line [8][9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24]. The store's benefit is calculated by dividing the gain in key-availability ∆a by the gain in key-vulnerability ∆v that would result from adding the current bundle including the store to the solution.…”

Section: Maxavail Heuristicmentioning

confidence: 99%

See 1 more Smart Citation

User-centric management of distributed credential repositories

Kohler

Mittag

Hartenstein

2013

Proceedings of the 18th ACM Symposium on Access Control Models and Technologies

View full text Add to dashboard Cite

To relieve users of the burden to memorize and manage their credentials while allowing for seamless roaming between various end devices, the idea of so-called credential repositories that store credentials for users came to attention. Both the risk of the credential repository being unavailable and the risk of the credentials becoming compromised are managed by the party that hosts the credential repository and that has to be trusted by the user. Removing the need for a trust relationship to a single party implies that users have to manage the risks themselves, for instance, by splitting the credentials across multiple systems/parties. However, if the systems differ in terms of availability and vulnerability, determining a suitable splitting strategy to manage the tradeoff between credential availability and vulnerability constitutes a complex problem. In this paper we present CREDIS, an approach that supports the user in building a credential repository based on heterogeneous systems that differ in terms of vulnerability and availability. CREDIS enables users to specify requirements on the availability and the vulnerability of the distributed credential repository and determines an optimal strategy on how to split secrets across the heterogeneous systems. We prove the NP-hardness of finding an optimal strategy, introduce an approach based on Integer Linear Programming to find optimal strategies for medium sized scenarios and propose heuristics for larger ones. We show that the CREDIS approach yields a reasonably secure and available credential repository even when the distributed repository is built based on low-grade devices or systems.

show abstract

Section: Maxavail Heuristicmentioning

confidence: 99%

“…These protocols are already used to establish credential repositories that are split across several servers [10] (e.g., in the VeriSign Personal Trust Service [15]). However, splitting up the secrets reduces their availability, as to retrieve a secret multiple servers need to be online.…”

Section: Related Workmentioning

confidence: 99%