A Research on Performance Evaluation Method of Central Authentication Service

YANG Fan,DI Dehai,HAN Bo,LI Yiming

2012-01-01

Abstract:This paper analyzed the authentication process of Central Authentication Service(CAS),and designed atesting program to simulate a full authentication process.In the experimental environment,we verified the viability ofthis program,and gave stress testing and performance evaluation method of CAS.

What problem does this paper attempt to address?

Researches on Performance Evaluation of Biometric Authentication Systems

zhu jianxin,yang xiaohu,ye ronghua

DOI: https://doi.org/10.3321/j.issn:1002-8331.2002.16.022

2002-01-01

Abstract:Evaluating the performance of biometric systems is a complex problem.This paper describes a number of im-portant concepts about the performance evaluating of biometric systems ,such as accuracy,speed,robustness and storage requirements.It analyzes detailedly the performance evaluating of fingerprint recognition,face recognition and voice recog-nition.In security area including computer security,how and where biometric systems are deployed will depend on their performance.
SIP Authentication Mechanism and Its Performace Analysis

金康双,王泽兵,冯雁,陈海燕

DOI: https://doi.org/10.3969/j.issn.1001-3695.2004.08.034

2004-01-01

Abstract:Session Initiation Protocol(SIP) is the Internet Engineering Task Force (IETF) standard for IP telephony,and it has a promising applied prospect.In this work,the security authentication mechanism used by SIP is described.Moreover an experimental performance analysis of the SIP security mechanisms is provided,which based on the open source Java implementation of a SIP proxy server.
Researche on Design of Biometric Authentication System

zhu jianxin,yang xiaohu,dong jinxiang,cao zhexin

DOI: https://doi.org/10.3321/j.issn:1002-8331.2002.10.030

2002-01-01

Abstract:The reliable identity authentication will ensure the security of information system firstly.The technology of biometric authentication will provide a more reliable and more secure method to protect the security of information system.This paper analyzes a generalized biometric identification system reference model,then point s out that this model will help the design of architecture in the biometric authentication system.The paper also analyzes the main issues that must be considered in the design of biometric authentication system,then introduces an example -the design of fingerprint-based authentication system in network environment.
Inter-domain authentication scheme for Pervasive Computing Environments

YAO Lin,FAN Qingna,KONG Xiangwei

DOI: https://doi.org/10.3778/j.issn.1002-8331.2011.06.023

2011-01-01

Abstract:As a result of the high mobility of the pervasive computing,the principles communicating with each other usually locate at different domains.To secure the service access and communications,the principles should authenticate each other and establish a fresh session key.A novel inter-domain authentication and key establishment protocol is proposed.The proposed protocol reduces the burden of certificates management by adopting the biometric encryption.After inter-domain mutual authentication,the two principles build a new session key using the signcryption technique.The protocol can defend lots of attacks and its correctness is proven by the SVO logic.
Demo: WISP-based Access Control Combining Electronic and Mechanical Authentication

Yuanchao Shu,Jiming Chen,Fachang Jiang,Yu Gu,Zhiyu Dai,Tian He

DOI: https://doi.org/10.1145/2070942.2071025

2011-01-01

Abstract:To bridge the gap between insufficiency of existing proximity authentication solutions and the increasing demand of high security guarantee for access control systems, we develope a WISP-based access control system combing electronic and mechanical authentication methods. In our authentication, encryption complexity is changeable and trusted users can share privileges with each other. During experiments, our system has achieved 95% authentication accuracy rate with up to 3 different users.
Dynamic Authentication with Sensory Information for the Access Control Systems.

Yuanchao Shu,Yu (Jason) Gu,Jiming Chen

DOI: https://doi.org/10.1109/tpds.2013.153

IF: 5.3

2014-01-01

IEEE Transactions on Parallel and Distributed Systems

Abstract:Access card authentication is critical and essential for many modern access control systems, which have been widely deployed in various government, commercial, and residential environments. However, due to the static identification information exchange among the access cards and access control clients, it is very challenging to fight against access control system breaches due to reasons such as loss, stolen or unauthorized duplications of the access cards. Although advanced biometric authentication methods such as fingerprint and iris identification can further identify the user who is requesting authorization, they incur high system costs and access privileges cannot be transferred among trusted users. In this work, we introduce a dynamic authentication with sensory information for the access control systems. By combining sensory information obtained from onboard sensors on the access cards as well as the original encoded identification information, we are able to effectively tackle the problems such as access card loss, stolen, and duplication. Our solution is backward-compatible with existing access control systems and significantly increases the key spaces for authentication. We theoretically demonstrate the potential key space increases with sensory information of different sensors and empirically demonstrate simple rotations can increase key space by more than 1,000,000 times with an authentication accuracy of 90 percent. We performed extensive simulations under various environment settings and implemented our design on WISP to experimentally verify the system performance.
Performance Analysis Method for Access Authentication Mechanism

LIU Wei,YANG Lin,LI Quan-lin

DOI: https://doi.org/10.3969/j.issn.1002-137x.2011.01.009

2011-01-01

Computer Science

Abstract:Authentication mechanism has important meanings to network security defence.Most researchers mainly focus on putting forward new authentication methods and analyzing the security of authentication protocols,but ignoring the research of quantitative analysis on authentication method.By analyzing the system of authentication as a quasi-birth-and-death process,establishing a two-dimensional queuing model,the steady probabilities distribution can be obtained to compute some important indices.The experimental results prove that the general analytical method can effectively evaluate the performance of authentication method.
Study of Network Authentication Based on RADIUS Protocol

YANG Jian-jun,JIA Chen-jun,RAN Li-xin

DOI: https://doi.org/10.3785/j.issn.1008-973x.2005.02.014

2005-01-01

Abstract:By analyzing the principle of remote authentication dial in user service (RADIUS) protocol and the applied security algorithm, an improved RADIUS protocol was proposed to enhance the security performance of networks.Based on the improved protocol,AAA (authentication,authority and account) architecture was set up for the Internet service providers.The AAA architecture for wireless gateway does not increase the complexity of the communication systems, and is simple and easy to implement.
An Enhanced Biometrics-Based User Authentication Scheme for Multi-Server Environments in Critical Systems

Xiong Li,Kaihui Wang,Jian Shen,Saru Kumari,Fan Wu,Yonghua Hu

DOI: https://doi.org/10.1007/s12652-015-0338-z

IF: 3.662

2016-01-01

Journal of Ambient Intelligence and Humanized Computing

Abstract:Computer networks have become so ubiquitous that the user can access various services by using network devices at anytime and anywhere. However, due to the open nature of the network, the security issue has become an important consideration in these network-based systems that cannot be ignored, especially in critical systems, such as life-critical system and financial system. User authentication scheme is the most used and effective mechanism for information security, and many user authentication schemes have been proposed by researchers. Recently, Shen et al. proposed a biometrics-based user authentication scheme for multi-server environments in critical systems. However, their scheme lacks the wrong password detection mechanism and is vulnerable to denial-of-service attack. Besides, they do not consider the user anonymity property, and may suffer from biometrics template lost attack because the biometrics template is directly stored in user’s smart card. In this paper, an enhanced biometrics-based user authentication scheme for multi-server environments in critical systems is presented by adopting the fuzzy extractor. The analysis shows that the proposed scheme not only removes the security weaknesses of previous schemes, but also keeps the computational efficiency.
COMPUTER SYSTEM PERFORMANCE ANALYSIS AND THE APPLICATION IN XSCC

Guo Wei,Shen Junyi

DOI: https://doi.org/10.3969/j.issn.1000-386X.2008.10.073

2008-01-01

Abstract:The paper introduced basic concepts of measurement tools,metrical experiment design,classic metric models,etc.on computer system performance eveluation,then gave out a performance analysis instance of a mainframe computer application system unifying with the measurement and evaluation work for a data service system in Xi'an Satellite Control Centre(XSCC).In end of the paper it summarized the functions and features of the test tools used in the instance.
A Unified Authentication Scheme Based on Analytic Mechanism

Yong Xu,Yejuan Cheng,Chang Xiao

DOI: https://doi.org/10.14257/ijsia.2015.9.1.26

2015-01-01

International Journal of Security and Its Applications

Abstract:To resolve security issues and management issues of different Certificate Authorities (CAs), this paper proposed a unified authentication scheme, which will make different Certificate Authorities (CAs) be uniformly authenticated. In addition, it showed the whole structure of the scheme, added an extensional registration number to certificates and designed unified authentication process for the scheme. The unified authentication process was modelled and simulated by Coloured Petri Net (CPN) Tools and verified by analyzing the state space of CPN model. In conclusion, this paper provides a unified authentication service and confirms that the proposed scheme is totally controllable, realizable and feasible. The suggested scheme can enhance the efficiency and security of authentication systems and achieve good results in practical applications.
Performance Analytic Model for Authentication Mechanism

Wei Liu,Lin Yang,Quan-Lin Li,Hao Dai,Bin Hou

DOI: https://doi.org/10.1109/icnsc.2008.4525380

2008-01-01

Abstract:Authentication mechanism is important for network security and defence. In this paper, we describe the authentication process as a four-dimensional queuing model expressed as a quasi-birth-and-death process, and obtain the steady probabilities distribution, which leads to compute some important indices of the system. The numerical experiments show that the analytical method of this paper can effectively evaluate essential performance measures of this kind of authentication mechanism.
Design and Realization for More Flexible Authentication Authorization System

Jiang Lifeng,Zhao Baohua

DOI: https://doi.org/10.3321/j.issn:1002-8331.2006.18.071

2006-01-01

Abstract:In the face of more and more problems of security of application information system,this paper analyses the disadvantage and shortage of traditional authentication authorization system.It promotes the whole structure of authentication authorization system based on the Java Authentication Authorization Service framework and model of Role-Based Access Control and its realization process are given.Some relative key techniques including the design of authentication module and authorization module are emphasized.
Research for the Application of Authentication and Authorizaton System in Campus Network

常晓磊,陈怀楚,王映雪

DOI: https://doi.org/10.3321/j.issn:0529-6579.2001.z1.031

2001-01-01

Abstract:This article describes the position and function of authentication and authorization system in campus network, and discusses a practical authentication systems architecture.
A Performance Evaluation Method and It's Implementation for Web Service

Fei Sha,Ke Yu,Lin Zhang,Xiaofei Wu

DOI: https://doi.org/10.1109/icbnmt.2010.5705083

2010-01-01

Abstract:With prevalence and convenience of network services, the Quality of Service (QoS) has become one of the biggest concerns for Internet Service Provider (ISP). Some International standards organizations such as IETF and ITU-T have defined standards related to network performance metrics and numerous researches have focused on this field. However, most existing research works on service performance are based on metrics at the network level rather than users' experience. In this paper, we present a Web Service Evaluation System (WSES) which is based on end-to-end measurements. Our system can not only measure network performance metrics accurately, but also evaluate the quality of Web Service with special evaluation methods from users' viewpoint. We implement WSES in real network environment and analyze the collected data. The results show that by using WSES, ISPs can monitor and evaluate the performance of network and Web Service effectively and promptly.
An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards

Xiong Li,Yongping Xiong,Jian Ma,Wendong Wang

DOI: https://doi.org/10.1016/j.jnca.2011.11.009

IF: 7.574

2012-01-01

Journal of Network and Computer Applications

Abstract:Generally, if a user wants to use numerous different network services, he/she must register himself/herself to every service providing server. It is extremely hard for users to remember these different identities and passwords. In order to resolve this problem, various multi-server authentication protocols have been proposed. Recently, Sood et al. analyzed Hsiang and Shih's multi-server authentication protocol and proposed an improved dynamic identity based authentication protocol for multi-server architecture. They claimed that their protocol provides user's anonymity, mutual authentication, the session key agreement and can resist several kinds of attacks. However, through careful analysis, we find that Sood et al.'s protocol is still vulnerable to leak-of-verifier attack, stolen smart card attack and impersonation attack. Besides, since there is no way for the control server CS to know the real identity of the user, the authentication and session key agreement phase of Sood et al.'s protocol is incorrect. We propose an efficient and security dynamic identity based authentication protocol for multi-server architecture that removes the aforementioned weaknesses. The proposed protocol is extremely suitable for use in distributed multi-server architecture since it provides user's anonymity, mutual authentication, efficient, and security.
Security Authentication for Substation Communication Message and Its Real-time Simulation

YANG Yang,HUANG Xiaoqing,CAO Yijia,ZHANG Zhidan,HE Jie

2011-01-01

Abstract:As the security specifications for IEC 61850 P2P communication protocol(real-time communication),IEC 62351-6 recommends the adoption of authentication for ensuring the safety of data transmission.To meet the requirement for the data flow and data security objectives in IEC 61850 digital substations,a method of implementing identity authentication with extended safe message through SHA-1 and DES encryption is put forward.Through the security analysis,it can meet the confidentiality,integrity and validity of the message.Further,by taking the bus fault on the unified star and the ring network in the whole D2-1 substation as an example,the OPNET network simulation and calculation are applied to the process of authentication.It is proved that the substation communication program has both good security and real-time character.
Research of Information System Security Evaluation

CHEN Lei-ting,WEN Li-Yu,LI Zhi-gang

DOI: https://doi.org/10.3969/j.issn.1001-0548.2005.03.023

2005-01-01

Abstract:This paper introduces the definition, standard and development on evaluation of information security; emphasis on Class of B2 in TCSEC, especially the security policy of B2, such as discretionary access control, object reuse, Labels (label integrity and exportation of labeled information) and mandatory access control. this paper also studies and analyses the other requirements for class B2, such as identification and authentication in the requirement of accountability; operational assurance (system architecture, system integrity, covert channel analysis and trusted facility management) and life-cycle assurance (security testing, design specification and verification and configuration management) in the requirement of assurance; security features user’s guide, trusted facility manual, test documentation and design documentation in the requirement of documentation. in the end of this paper, we study and comparatively analyses the class of B2 with the class of EAL5 in CC.
An Enhanced Biometric-Based Three Factors User Authentication Scheme for Multi-Server Environments

Youping Lin,Kaihui Wang,Baocan Zhang,Yuzhen Liu,Xiong Li

DOI: https://doi.org/10.14257/ijsia.2016.10.1.29

2016-01-01

International Journal of Security and Its Applications

Abstract:Authentication is an important and basic security service for many network based applications, which allows the registered user access remote services after the validity of his/her identity is verified by the remote server. Password, smart card and biometric are three frequently used factors in authentication, and some remote user authentication schemes for different environments had been presented based on these factors by researchers. Recently, Baruah et al. pointed out the weaknesses of Mishra et al.'s three factors user authentication scheme for multi-server environments, and they proposed an enhanced scheme. They claimed that their scheme has many security features and can resist some common attacks. However, based on our analysis, Baruah et al.'s scheme cannot resist stolen smart card attack, cannot protect user's anonymity, and it is also vulnerable to Denial of Service attack. In this paper, an enhanced three factors user authentication scheme for multi-server environments based on fuzzy extractor technology is proposed, and the analysis show that the proposed scheme is more security and efficient than other related schemes.
Study on Performance Evaluation Model and Index Systems of Administrative Service Centers

Shuo Yang,Han Li,Li-Li Cao

DOI: https://doi.org/10.2991/icmesd-17.2017.74

2017-01-01

Abstract:In this paper, we analyzed the status quo and existing problems of performance evaluation. Using KPI index design method, we constructed a performance evaluation model of administrative service according to the layers of administrative service activities. Such work has laid a foundation for putting theoretical research on performance evaluation of administrative service center into practical application, which can facilitate the quality promotion and development of administrative service centers.

A Research on Performance Evaluation Method of Central Authentication Service

Researches on Performance Evaluation of Biometric Authentication Systems

SIP Authentication Mechanism and Its Performace Analysis

Researche on Design of Biometric Authentication System

Inter-domain authentication scheme for Pervasive Computing Environments

Demo: WISP-based Access Control Combining Electronic and Mechanical Authentication

Dynamic Authentication with Sensory Information for the Access Control Systems.

Performance Analysis Method for Access Authentication Mechanism

Study of Network Authentication Based on RADIUS Protocol

An Enhanced Biometrics-Based User Authentication Scheme for Multi-Server Environments in Critical Systems

COMPUTER SYSTEM PERFORMANCE ANALYSIS AND THE APPLICATION IN XSCC

A Unified Authentication Scheme Based on Analytic Mechanism

Performance Analytic Model for Authentication Mechanism

Design and Realization for More Flexible Authentication Authorization System

Research for the Application of Authentication and Authorizaton System in Campus Network

A Performance Evaluation Method and It's Implementation for Web Service

An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards

Security Authentication for Substation Communication Message and Its Real-time Simulation

Research of Information System Security Evaluation

An Enhanced Biometric-Based Three Factors User Authentication Scheme for Multi-Server Environments

Study on Performance Evaluation Model and Index Systems of Administrative Service Centers