当前位置: X-MOL 学术IET Commun. › 论文详情
Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)
Mitigating the desynchronisation attack in multiserver environment
IET Communications ( IF 1.5 ) Pub Date : 2020-07-22 , DOI: 10.1049/iet-com.2019.1069
Saeed Ullah Jan 1 , Fawad Qayum 1
Affiliation  

Currently, every user outsources a huge amount of shared secrets remotely from different servers and utilises synchrony resources. To make all types of operations secure for the end-user, synchronous storage is vital and asynchronous storage might lead to the unavailability of successful services. Hence, a robust authentication scheme is mandatory for such purpose which not only confirms the synchrony of the distributed shared resources but also secure access to shared secrets. So far no one has offered an accurate and flawless secure mechanism despite serious attempts. For this purpose, the authors have designed an improved and robust authentication protocol to ensure the security, integrity, and confidentiality of information and synchrony of shared secrets up to a maximum level. The security of the proposed dynamic mechanism has been verified both formally using random Oracle model and verification toolkit ProVerif2.00 and informally using assumptions and theorems. A delicate balance between security and performance has been shown in the performance analysis section of the study.

中文翻译:

减轻多服务器环境中的不同步攻击

当前,每个用户都从不同的服务器远程外包大量共享机密,并利用同步资源。为了使所有类型的操作对最终用户都安全,同步存储至关重要,异步存储可能会导致无法获得成功的服务。因此,出于这种目的,必须使用健壮的身份验证方案,该方案不仅可以确认分布式共享资源的同步性,而且可以安全地访问共享机密。到目前为止,尽管有人进行了认真的尝试,但没有人提供一种准确无误的安全机制。为此,作者设计了一种改进且健壮的身份验证协议,以确保信息的安全性,完整性和机密性以及共享机密的同步性达到最高水平。所提出的动态机制的安全性已通过随机Oracle模型和验证工具包ProVerif2.00进行了正式验证,并使用了假设和定理进行了非正式验证。研究的性能分析部分显示了安全性和性能之间的微妙平衡。
更新日期:2020-07-24
down
wechat
bug