| Title | A High Security Signature Algorithm Based on Kerberos for REST-style Cloud Storage Service |
| Publication Type | Conference Paper |
| Year of Publication | 2020 |
| Authors | Yang, Yuanyuan, Li, Hui, Cheng, Xiangdong, Yang, Xin, Huo, Yaoguang |
| Conference Name | 2020 11th IEEE Annual Ubiquitous Computing, Electronics Mobile Communication Conference (UEMCON) |
| Date Published | oct |
| Keywords | authentication, cloud computing, cloud storage, cryptography, Distributed databases, Human Behavior, human factors, identity authentication, Kerberos, Metrics, password, Protocols, pubcrawl, Resiliency, rest, Scalability, security, Security Module, Servers, Ubiquitous Computing Security |
| Abstract | The Representational State Transfer (REST) is a distributed application architecture style which adopted on providing various network services. The identity authentication protocol Kerberos has been used to guarantee the security identity authentication of many service platforms. However, the deployment of Kerberos protocol is limited by the defects such as password guessing attacks, data tampering, and replay attacks. In this paper, an optimized Kerberos protocol is proposed and applied in a REST-style Cloud Storage Architecture. Firstly, we propose a Lately Used Newly (LUN) key replacement method to resist the password guessing attacks in Kerberos protocol. Secondly, we propose a formatted signature algorithm and a combination of signature string and time stamp method to cope with the problems of tampering and replay attacks which in deploying Kerberos. Finally, we build a security protection module using the optimized Kerberos protocol to guarantee a secure identity authentication and the reliable data communication between the client and the server. Analyses show that the module significantly improves the security of Kerberos protocol in REST-style cloud storage services. |
| DOI | 10.1109/UEMCON51285.2020.9298140 |
| Citation Key | yang_high_2020 |
A High Security Signature Algorithm Based on Kerberos for REST-style Cloud Storage Service