Combining User Authentication with Role-Based Authorazition Based on Identity-Based Signature

Authors:
Jin Wang;Jia Yu;Daxing Li;Xi Bai;Zhongtian Jia
Affiliations:
Institute of Network and Information Security, Shandong University, Jinan 250100, China;Institute of Network and Information Security, Shandong University, Jinan 250100, China and College of Information Engineering, Qingdao University, Qingdao 266071, China;Institute of Network and Information Security, Shandong University, Jinan 250100, China;Institute of Network and Information Security, Shandong University, Jinan 250100, China;Institute of Network and Information Security, Shandong University, Jinan 250100, China and School of Information Science and Engineering, Jinan University, Jinan 250022, China
Venue:
Computational Intelligence and Security
Year:
2007

Citing 8
Cited 0

Identity-based cryptosystems and signature schemes

Proceedings of CRYPTO 84 on Advances in cryptology
Role-Based Access Control Models

Computer
Proposed NIST standard for role-based access control

ACM Transactions on Information and System Security (TISSEC)
Efficient Identity Based Signature Schemes Based on Pairings

SAC '02 Revised Papers from the 9th Annual International Workshop on Selected Areas in Cryptography
Identity-Based Encryption from the Weil Pairing

CRYPTO '01 Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology
Short Signatures from the Weil Pairing

ASIACRYPT '01 Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
An Identity-Based Signature from Gap Diffie-Hellman Groups

PKC '03 Proceedings of the 6th International Workshop on Theory and Practice in Public Key Cryptography: Public Key Cryptography
Access control using pairing based cryptography

CT-RSA'03 Proceedings of the 2003 RSA conference on The cryptographers' track

Quantified Score

Hi-index	0.00

Visualization

Abstract

Authentication and authorization are crucial for ensuring the security of information systems. Role-based access control (RBAC) can act as an efficient method of managing authorization of system resources. In this paper, we apply identity-based signature (IBS) technique to cryptographically provide user authentication and role-based authorization. To achieve this, we first extend the RBAC model to incorporate identity-based cryptography. Our access control architecture is derived from an identity-based signature scheme on bilinear pairings and eliminates the use of digital certificates. In our suggestion, the manager checks the validity of a user's identity and user's activated roles simultaneously by verifying a corresponding signature, thus the user authentication and role-based authorization procedures can be combined into one operation. We also prove the security of the proposed scheme in the random oracle model.