User-friendly and certificate-free grid security infrastructure

  • Authors:
  • Jason Crampton;Hoon Wei Lim;Kenneth G. Paterson;Geraint Price

  • Affiliations:
  • Royal Holloway, Information Security Group, University of London, London, UK;Nanyang Technological University, Coding and Cryptography Research Group, Singapore, Singapore;Royal Holloway, Information Security Group, University of London, London, UK;Royal Holloway, Information Security Group, University of London, London, UK

  • Venue:
  • International Journal of Information Security
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

Certificate-based public key infrastructures are currently widely used in computational grids to support security services. From a user’s perspective, however, certificate acquisition is time-consuming and public/private key management is non-trivial. In this paper, we propose a security infrastructure for grid applications, in which users are authenticated using passwords. Our infrastructure allows a user to perform single sign-on based only on a password, without requiring a public key infrastructure. Moreover, hosting servers in our infrastructure are not required to have public key certificates. Nevertheless, our infrastructure supports essential grid security services, such as mutual authentication and delegation, using public key cryptographic techniques without incurring significant additional overheads in comparison with existing approaches.