Seung-Chul Park · Journal of the Korea society of IT services · 2011
In the current Internet environment, there may exist a number of independently-operating authentication systems even within a single organization, according to the service types and service providing entities. Current silo-style isolated authentication system model has revealed critical problems in the aspects of usability, cost-effectiveness, extensibility and flexibility, and privacy protection. Recently, several next generation authentication systems have been actively developed by leading industrial and standardization institutions. This paper firstly analyzes the problems of current Internet authentication system environments. And then, the underlying idea, operating procedures, and pros and cons of the newly developed next generation authentication systems are analyzed so as to provide the selection guidelines for the new authentication systems and drive further development directions for future Internet authentication systems.
Cited by 0Open access
Mohamed A. El-Zawawy, Alessandro Brighente, Mauro Conti · Computer Networks · 2022
Cited by 25Open access
Song-Ho Pak, Pak Myong-Suk, Jang Chung-Hyok · arXiv (Cornell University) · 2016
This paper proposes a PKINIT_AS Kerberos V5 authentication system to use public key cryptography and a method to implement the gssapi_krb authentication method and secured Internet service using it in IPSec VPN
Cited by 0Open access
Atef Bentahar, Abdallah Meraoumia, Louardi Bradji et al. · Journal of King Saud University - Computer and Information Sciences · 2021
Internet of Things (IoT) sensing capabilities are now available as a public service. This new model, called sensing as a service (S2aaS), allows data owners to sell and/or exchange data with consumers interested in large open markets. However, the openness of the service industry makes the IoT-based S2aaS model more susceptible to malicious attacks. In this article, we propose a simple, efficient, and secure key agreement scheme for IoT-based S2aaS model. Users in the proposed system can securely and quickly access public services through a simple website rather than a traditional smart card. To simulate a real S2aaS environment, the cloud is treated as an untrusted node in the proposed method, and not all channels are secure. The fuzzy extractor and elliptic-curve Diffie–Hellman algorithms are used in conjunction with symmetric encryption and hash functions to establish a secure key agreement and data exchange session. In critical and frequent intervals, heavy processes are avoided. The proposed scheme's security has been informally analyzed and formally proven using the Automated Validation of Internet Security Protocols and Applications tool. The results show that our scheme satisfies the security requirements.
Cited by 16Open access
Wei Liang, Songyou Xie, Jing Long et al. · Information Sciences · 2019
Cited by 99
Wei Liang, Weihong Huang, Wuhui Chen et al. · Sensors · 2019
Rapid advances in the Internet-of-Things (IoT) have exposed the underlying hardware devices to security threats. As the major component of hardware devices, the integrated circuit (IC) chip also suffers the threat of illegal, malicious attacks. To protect against attacks and vulnerabilities of a chip, a credible authentication is of fundamental importance. In this paper, we propose a Hausdorff distance-based method to authenticate the identity of IC chips in IoT environments, where the structure is analyzed, and the lookup table (LUT) resources are treated as a set of reconfigurable nodes in field programmable gate array (FPGA)-based IC design. Unused LUT resources are selected for insertion of the copyright information by using the depth-first search algorithm, and the random positions are reordered with the Hausdorff distance matching function next, so these positions are mapped to satisfy the specific constraints of the optimal watermark positions. If the authentication process is activated, virtual positions are mapped to the initial key file, yet the identity of the IC designed can be authenticated using the mapping relationship of the Hausdorff distance function. Experimental results show that the proposed method achieves good randomness and secrecy in watermark embedding, as well the extra resource overhead caused by watermarks are promising.
Cited by 14Open access
Yuanyuan Han, Yongshan Liu, Wei Chen et al. · INTERNATIONAL JOURNAL ON Advances in Information Sciences and Service Sciences · 2012
Cited by 0
R. Sivamalar, Rubina Sultana Mohammed, Anjali Appukuttan et al. · Journal of Internet Services and Information Security · 2026
The rapid growth of Extended Reality (XR) Internet services has raised significant security concerns, especially for immersive visual identity authentication. Deepfake-based impersonation attacks can harm user trust and data confidentiality. Traditional biometric systems, which are mainly unimodal facial recognition, are susceptible to synthetic media manipulation and adversarial spoofing. This paper proposes an immersive visual identity authentication system, coupled with a deepfake detection system that leverages multimodal feature fusion to enhance security in XR settings. The given model integrates spatial-temporal facial representations, periocular texture representations, voice spectral representations, and behavioural motion patterns via a hybrid attention-based fusion network. An evaluation was conducted on a dataset of 18,500 authentic and 17,300 deepfake XR interaction samples. Experiments show that the multimodal fusion model achieves an authentication accuracy of 98.7%, which is much higher than that of unimodal models (face-only: 92.4%; voice-only: 89.1%). The proposed deepfake detection module achieves the following precision, recall, F1-score, and false acceptance rate (FAR): 97.9%, 98.3%, 98.1%, and 1.2%, respectively, representing a 43% decrease in spoofing vulnerability compared to traditional CNN-based detectors. Additionally, real-time viability is verified through latency analysis, with an average authentication cycle processing delay of 34 ms, which is within the constraints of immersive XR services. The results suggest that multimodal feature fusion is associated with a high level of resistance to identity verification in immersive Internet ecosystems under synthetic identity manipulation. The proposed framework will contribute to a secure, scalable, and reliable authentication infrastructure for next-generation XR-enabled digital services.
Cited by 0Open access
Yu-Sheng Yang, Shih‐Hsiung Lee, Wei-Che Chen et al. · Sensors · 2021
The vigorous development of the Industrial Internet of Things brings the advanced connection function of the new generation of industrial automation and control systems. The Supervisory Control and Data Acquisition (SCADA) network is converted into an open and highly interconnected network, where the equipment connections between industrial electronic devices are integrated with a SCADA system through a Modbus protocol. As SCADA and Modbus are easily used for control and monitoring, the interconnection and operational efficiency between systems are highly improved; however, such connectivity inevitably exposes the system to the open network environment. There are many network security threats and vulnerabilities in a SCADA network system. Especially in the era of the Industrial Internet of Things, any security vulnerability of an industrial system may cause serious property losses. Therefore, this paper proposes an encryption and verification mechanism based on the trusted token authentication service and Transport Layer Security (TLS) protocol to prevent attackers from physical attacks. Experimentally, this paper deployed and verified the system in an actual field of energy management system. According to the experimental results, the security defense architecture proposed in this paper can effectively improve security and is compatible with the actual field system.
Cited by 16Open access
Fayez Alqahtani, Zafer Al-Makhadmeh, Amr Tolba et al. · Computer Communications · 2019
Cited by 47
2016
Abstract—The authentication is an important research topic in the study of distributed application services. To cope with the influence from unstable services, reaching a high security before performing some special applications is essential. Nowadays, network bandwidth and hardware technology are developing rapidly, resulting in the vigorous development of the Internet. However, cloud computing, an Internet-based development in which dynamically scalable and often virtualized resources are provided as a service over the Internet has become a significant issue. According to the characteristics of Cloud computing, the enterprises can support the business services on the Internet. However, the authentication is one of the important problems in Cloud computing environment. In this study, a protocol, Group Key Authentication (GKA), is proposed that the authentication time and data traffic in the Cloud computing can be reduced and the Quality of Service (QoS) can be increased. Keywords—Cloud computing, Service oriented
Cited by 0
Kenji Ohira, Ying Huang, Yasuo Okabe et al. · 2005
A new service model of public wireless Internet access, called autonomous distributed public wireless Internet access, is presented. In the service model any volunteer with broadband Internet access lines can provide his access points for public service without any fear of malicious use. A user of such service is assumed to have his own account on a authentication server at home in the Internet, and all the Internet access through any of those access points can be treated as if it is from the home. In this paper, we present how the autonomous distributed Internet access services can be securely provided with the combinations of two aspects: treatment of authentication transactions at access points and data path of communication transaction.
Cited by 5
Yun-Kyung Lee, Hongil Ju, Jee-hye Park et al. · 2006 8th International Conference Advanced Communication Technology · 2006
User authentication is an essential component for secured home network service. It enables non-authorized persons not to use the home network. User authentication mechanisms supplying various authentication methods can provide user convenience in user authentication. To add to this, the use of the home gateway included in the authentication server function enable users to be authenticated in the home gateway, the users can use all authorized home network service and Internet contents services. It is possible by the authentication agent of the home gateway. This paper describes user authentication mechanism using authentication server.
Cited by 10
Maowen GUO, Rong ZHANG, Yanqing LU et al. · SHILAP Revista de lepidopterología · 2018
Aiming at the pain point of current internet applications,on the basis of analyzing the key factors that should be considered in the development of unified account authentication service,a technical scheme of unified account authentication service based on mobile phone number was put forward,including the overall architecture of the system,the application interface scene,and the implementation of differentiated authentication.Then,the related ideas about the operators’ unified account authentication service interconnection were analyzed.Finally,the prospect of the operators to develop unified account authentication service was also discussed.
Cited by 0Open access
Shu-Ting Wang, Mao‐Lun Chiang, K.Q. Yan et al. · 2011
The authentication is an important research topic in the study of distributed application services. To cope with the influence from unstable services, reaching a high security before performing some special applications is essential. Nowadays, network bandwidth and hardware technology are developing rapidly, resulting in the vigorous development of the Internet. However, cloud computing, an Internet-based development in which dynamically scalable and often virtualized resources are provided as a service over the Internet has become a significant issue. According to the characteristics of Cloud computing, the enterprises can support the business services on the Internet. However, the authentication is one of the important problems in Cloud computing environment. In this study, a protocol, Group Key Authentication (GKA), is proposed that the authentication time and data traffic in the Cloud computing can be reduced and the Quality of Service (QoS) can be increased.
Cited by 0
Mike Just, X. Email Infrastructure Security · 2010
◮ Email, the first widely available Internet service, has a very simple backbone. SMTP (Simple Mail Transport Protocol) uses plain-text commands in a telnet session, with little or no authentication. You can type them directly. with no authentication Moreover, some delivery agents like POP3 use plaintext and clear passwords. Secure IMAP is better. Email infrastructure security ◮ Email, the first widely available Internet service, has a very simple backbone. SMTP (Simple Mail Transport Protocol) uses plain-text commands in a telnet session, with little or no authentication. You can type them directly. with no authentication Moreover, some delivery agents like POP3 use plaintext and clear passwords. Secure IMAP is
Cited by 0
Gabriel-Catalin Cristescu, Victor Croitoru · 2021
A user-logging solution based on the Authentication Authorization and Accounting mechanism that is resistant to Spoofed Packet Injection attack is presented in this paper. The Remote Authentication Dial-In User Service protocol is often implemented in telecommunications networks, thus being the target of cyber-attacks. To secure the process of user authentication in the networks of Internet Service Providers, it is necessary to develop and implement security modules in the RADIUS authentication PolicyFlow.
Cited by 2
Shu Ching Wang, Wen Pin Liao, Kuo Qin Yan et al. · Applied Mechanics and Materials · 2013
Nowadays, network bandwidth and hardware technology are developing rapidly, resulting in the vigorous development of the Internet. However, cloud computing, an Internet-based development in which dynamically scalable and often virtualized resources are provided as a service over the Internet has become a significant issue. According to the characteristics of cloud computing, there are a lot of applications and data centers in the cloud-computing environment, hence, the issues of information and communication security and authentication must to be considered. However, the most of the studies on the security and authentication require large amounts of computing resource; therefore not suitable for the cloud-computing environment. In this paper, a lightweight computing protocol, Lightweight Authentication Protocol (LAP), is proposed to enhance the security of cloud computing environment and provide the authentication of service.
Cited by 4
Fred Baker, R. Atkinson · 1997
Growth in the Internet has made us aware of the need for improved
authentication of routing information. RIP-2 provides for
unauthenticated service (as in classical RIP), or password
authentication. [STANDARDS-TRACK]
Cited by 28
Benjamin Rothenberger, Dominik Roos, Markus Legner et al. · 2020
Denial-of-service attacks have become increasingly prevalent in the Internet. In many cases they are enabled or facilitated by the lack of source authentication?it is often easy for an attacker to spoof its own IP address and thus launch reflection attacks or evade detection. There have been attempts in the past to resolve this issue through filtering or cryptography-based techniques; however, there is still no sufficiently strong system in place today-all proposals either provide weak security guarantees, are not efficient enough, or lack incentives for deployment. In this paper we present PISKES, a pragmatic Internet-scale key-establishment system enabling firstpacket authentication. Through the PISKES infrastructure, any host can locally obtain a symmetric key to enable a remote service to perform source-address authentication. The remote service can itself locally derive the same key with efficient cryptographic operations. PISKES thus enables packet authentication for a wide variety of systems including high-throughput applications like DNS. We have implemented a prototype system that enables a DNS server to verify the source of every received packet within 85 ns, which is over 220 times faster than a system based on asymmetric cryptography. PISKES has been developed for the SCION secure Internet architecture but is also applicable to today's Internet. With its strong source-authentication properties and highly efficient operation it has the potential to finally bring network-layer authentication to the Internet
Cited by 27