Abstract:Public key authentication (PKA) has been deployed in various services to provide stronger authentication to users. In PKA, a user manages private keys on her devices called authenticators, and services bind the corresponding public keys to her account. To protect private keys, a user uses authenticators which never export private keys outside. On the other hand, a user regularly uses multiple authenticators like PCs and smartphones. She replaces some of her authenticators according to their lifecycle, such as purchasing new devices and losing devices. It is a burden for a user to register, update and revoke public keys in many services every time she registers new accounts with services and replaces some of her authenticators. To ease the burden, we propose a mechanism where users and services manage public keys based on the owner of authenticators and users can access services with PKA using any of their authenticators. We introduce a key pair called an Ownership Verification Key (OVK), which consists of the private key (OVSK) and the corresponding public key (OVPK). All authenticators owned by a user derive the same OVSK from the pre-shared secret called the seed. Services verify the ownership of the authenticators using the corresponding OVPK to determine whether binding the requested public key to her account. To protect user privacy while maintaining convenience, authenticators generate a different OVK for each service from the seed independently. We demonstrate the feasibility through the Proof of Concept implementation, show that our proposed mechanism achieves some security goals, and discuss how the mechanism mitigates threats not completely handled.

A Mechanism of Secure Key Management for Key Recovery

An Owner-managed Indirect-Permission Social Authentication Method for Private Key Recovery

Privacy Protection in Trust Management

��计算中基于可转换代理签密的可证安全的认证协议

Access-polynomial-based self-healing group key distribution scheme for resource-constrained wireless networks

A key distributed storage mechanism based on user credibility

Providing Key Recovery Capability for Mobile Communications

Effect of Ga$^{+}$ irradiation on magnetic and magnetotransport properties in (Ga,Mn)As epilayers

A Way Of Key Management In Cloud Storage Based On Trusted Computing

One-Time Certificates for Reliable and Secure Document Signing

Realization of Smart Home Key Management Mechanism Based on ECC

Key Management Based on Ownership of Multiple Authenticators in Public Key Authentication

Key Backup and Recovery for Resilient DID Environment

A Novel Protocol for Multiparty Quantum Key Management

Low-Cost Distributed Key Management

Private key encryption and recovery in blockchain

Toward distributed key management for offline authentication

The Design of Secure Document Management System

A Certificate-Less Distributed Key Management Scheme for Space Networks

Distributed Group Key Management Based on Blockchain

A Revocable Certificateless Encryption Scheme for Multi‐User