• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>IEEE Symposium on Reliable Distributed Systems >DToken: A Lightweight and Traceable Delegation Architecture for Distributed Systems
【24h】

DToken: A Lightweight and Traceable Delegation Architecture for Distributed Systems

机译：dtoken：用于分布式系统的轻量级和可追踪的委派架构

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Several major techniques have been proposed to address delegation problems in distributed computing environments of various scales, ranging from LAN, WAN, to the Internet. One of the major characteristics of existing public key cryptography based delegation mechanisms is their use of a fresh key pair every step along the delegation chain. This has led to a range of open issues, including a non-negligible performance overhead imposed by using a fresh key pair in proxy credentials; the lack of traceability of the principals in a delegation chain; and the complexity of managing the dynamically created key pairs in the distributed environment. This paper focuses on the architectural issues of delegation. We propose anew delegation architecture, called DToken, that takes advantage of the PKI. DToken is lightweight as it eliminates the use of freshly generated key pairs in a distributed setting. DToken is also traceable because the identity of the principals in a delegation chain is preserved by cryptographically verifiable mechanisms. A preliminary evaluation demonstrates that DToken outperforms the popular delegation solution of proxy certificate. In a single-level delegation, the cost of creating a DToken, the major cost of delegation, is roughly 1/3, 1/5, and 1/10 of that of creating a proxy certificate when the certificate key size is 512, 1024, and 2048 bits, respectively.
机译：已经提出了几种主要技术来解决各种尺度的分布式计算环境中的委派问题，从LAN，WAN到互联网。现有的基于公钥加密的代表机制的主要特征之一是他们使用新的关键对沿着代表团链的每一步。这导致了一系列的开放问题，包括在代理凭证中使用新鲜密钥对强加的不可忽略的性能开销;在代表团链中缺乏校长的可追溯性;以及在分布式环境中管理动态创建的键对的复杂性。本文侧重于代表团的建筑问题。我们提出了重新授权架构，称为Dtoken，它利用了PKI。 DToken是轻量级，因为它消除了在分布式设置中使用新生成的键对。 DToken也是可追溯的，因为代表链中的主体的身份通过加密可验证的机制保留。初步评估表明，DToken优于代理证书的流行委派解决方案。在单级别的委派中，创建Dtoken的成本，委派的主要成本，大约为1/3,1 / 5和1/10，其中在证书密钥大小为512,1024时创建代理证书分别为2048位。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号