Securely replicating authentication services

1 January 1989

conference paper
Published by Institute of Electrical and Electronics Engineers (IEEE)

p. 85-91
https://doi.org/10.1109/icdcs.1989.37934

Abstract

A framework for designing a type of distributed authentication protocol is given, whose security and availability are higher compared to those of centralized ones. It uses the technique of secret sharing and introduces a cross checksum scheme to achieve secure replication. Fewer than a certain number of malicious servers cannot damage security except by causing denial of service, and this only happens when too many honest servers accidentally fail at the same time. The protocol is suited to an environment where no trustworthiness of any server is permanently guaranteed. The approach is general enough not to rely on any particular authentication protocol. Existing implementations need minor modification. Only a short piece of code is needed to run the implementations as many times as required. Hence, different centralized protocols can be incorporated into one distributed protocol.<>

Keywords

This publication has 10 references indexed in Scilit:

Generalized Linear Threshold Scheme
Published by Springer Nature ,2000
How to Make Replicated Data Secure
Published by Springer Nature ,1988
On the KEY PREDISTRIBUTION SYSTEM: A Practical Solution to the Key Distribution Problem
Published by Springer Nature ,1988
Verifiable secret sharing and achieving simultaneity in the presence of faults
Published by Institute of Electrical and Electronics Engineers (IEEE) ,1985
A Secure One-Way Hash Function Built from DES
Published by Institute of Electrical and Electronics Engineers (IEEE) ,1984
Fail-stop processors
ACM Transactions on Computer Systems, 1983
How to share a secret
Communications of the ACM, 1979
Weighted voting for replicated data
Published by Association for Computing Machinery (ACM) ,1979
Using encryption for authentication in large networks of computers
Communications of the ACM, 1978
New directions in cryptography
IEEE Transactions on Information Theory, 1976