Abstract:In pervasive computing environments, users can get services anytime and anywhere, but the ubiquity and mobility of the environments bring new security challenges. The user and the service provider do not know each other in advance, they should mutually authenticate each other. The service provider prefers to authenticate the user based on his identity while the user tends to stay anonymous. Privacy and security are two important but seemingly contradictory objectives. As a result, a user prefers not to expose any sensitive information to the service provider such as his physical location, ID and so on when being authenticated. In this paper, a highly flexible mutual authentication and key establishment protocol scheme based on biometric encryption and Diffie-Hellman key exchange to secure interactions between a user and a service provider is proposed. Not only can a user’s anonymous authentication be achieved, but also the public key cryptography operations can be reduced by adopting this scheme. Different access control policies for different services are enabled by using biometric encryption technique. The correctness of the proposed authentication and key establishment protocol is formally verified based on SVO logic.

A solution for unified identity authentication based on LDAP

Design and Implementation of Unified Access Control System Based on LDAP

Unified Identity Authentication Between Heterogeneous Systems Based on LDAP and RBAC

Solution to VPN and Authentication System

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Design and Implementation of Multi-Role Logon Authentication Based on Tokencard System

Inter-domain authentication scheme for Pervasive Computing Environments

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

A New SIP SSO Mechanism

Construction of security architecture of web services based EAI

Secure Information Exchange Model Between PDM Systems

A Semantic and Trust Based Framework for Rbac User-Role Assignment

Design and Application of an Uniform Identity Authentication System for Building Knowledge Sharing Platform

Optimization and Practice of Unified User Authentication System at Peking University

The LDAP-based application within PKI for campus networks

Enterprise unified authentication and authorization system based on Web services

A policy-based architecture for web services authentication

Constructing authentication web in cloud computing

Contructing Authentication Web in Cloud Computing

Design and Implementation of Unified Authentication System Based on OpenID in Fiber Engineering

Towards a formal framework for distributed identity management