School of Computing

Distributed key management for secure role based messaging

Gansen Zhao, Sassa Otenko, and David Chadwick

In Proceeding of The IEEE 20th International Conference on Advanced Information Networking and Applications (AINA2006), pages 182-196, Vienna University of Technology, Vienna, Austria, April 2006.

Abstract

Secure Role Based Messaging (SRBM) augments messaging systems with role oriented communication in a secure manner. Role occupants can sign and decrypt messages on behalf of roles. This paper identifies the requirements of SRBM and recognises the need for: distributed key shares, fast membership revocation, mandatory security controls and detection of identity spoofing. A shared RSA scheme is constructed. RSA keys are shared and distributed to role occupants and role gate keepers. Role occupants and role gate keepers must cooperate together to use the key shares to sign and decrypt the messages. Role occupant signatures can be verified by an audit service. A SRBM system architecture is developed to show the security related performance of the proposed scheme, which also demonstrates the implementation of fast membership revocation, mandatory security control and prevention of spoofing. It is shown that the proposed scheme has successfully coupled distributed security with mandatory security controls to realize secure role based messaging.

Download publication 595 kbytes (PDF)

Bibtex Record

@inproceedings{2339,
author = {Gansen Zhao and Sassa Otenko and David Chadwick},
title = {Distributed Key Management for Secure Role Based Messaging},
month = {April},
year = {2006},
pages = {182-196},
keywords = {determinacy analysis, Craig interpolants},
note = {},
doi = {},
url = {http://www.cs.kent.ac.uk/pubs/2006/2339},
    publication_type = {inproceedings},
    submission_id = {25708_1137858917},
    booktitle = {Proceeding of The IEEE 20th International Conference on Advanced Information Networking and Applications (AINA2006)},
    address = {Vienna University of Technology, Vienna, Austria},
}

School of Computing, University of Kent, Canterbury, Kent, CT2 7NF

Enquiries: +44 (0)1227 824180 or contact us.

Last Updated: 21/03/2014