Layering Public Key Distribution Over Secure DNS using Authenticated Delegation

Authors:
John P. Jones;Daniel F. Berger;Chinya V. Ravishankar
Affiliations:
University of California, Riverside;University of California, Riverside;University of California, Riverside
Venue:
ACSAC '05 Proceedings of the 21st Annual Computer Security Applications Conference
Year:
2005

Citing 0
Cited 3

Resolving islands of security problem for DNSSEC

Proceedings of the 2006 international conference on Wireless communications and mobile computing
Trusted Directory Services for Secure Internet Connectivity

Electronic Notes in Theoretical Computer Science (ENTCS)
PBES: a policy based encryption system with application to data sharing in the power grid

Proceedings of the 4th International Symposium on Information, Computer, and Communications Security

Quantified Score

Hi-index	0.01

Visualization

Abstract

We present the Internet Key Service (IKS), a distributed architecture for authenticated distribution of public keys, layered on Secure DNS (DNSSEC). Clients use DNSSEC to securely discover the identities of the relevant IKS servers, and send key lookup or management requests directly to these servers using a special-purpose protocol. Clients authenticate keys retrieved from IKS servers using key commitments published in DNSSEC. IKS derives its authentication authority from the authority DNS domains have over Internet names. The IKS architecture is loosely coupled with DNS to minimize overhead on DNS servers. We also present RIKS, a prototype IKS implementation.