Publications - Pervasive Computing Laboratory

 Access control anotacionsemantica authentication Cloud computing coap compromise cryptography cynamon emadrid emrisco home network I-Shaper identity management inrisco inteligenciafuentesabiertas Internet of Things IoT magos Pervasive computing privacy Protocols Qursa raudo2 Security servicioseguridad Smart Card Trust management Ubisec VANETs 
Show all
2008
 Díaz-Sánchez, Daniel;  Marín, Andrés;  Almenarez, Florina;  Campo, Celeste;  Cortés, Alberto;  García-Rubio, Carlos
Trust Negotiation Protocol Support for Secure Mobile Network Service Deployment Book Chapter 
In: IFIP International Federation for Information Processing, vol. 284, pp. 271 - 282, Springer US, 2008, ISBN: 978-0-387-84838-9.
Abstract | Links | BibTeX | Tags: international telecommunication union, message authentication code, Mutual Authentication, protocol message, recursosteleeducacion, transport layer security
@inbook{bc005,

title = {Trust Negotiation Protocol Support for Secure Mobile Network Service Deployment},

author = {Daniel Díaz-Sánchez and Andrés Marín and Florina Almenarez and Celeste Campo and Alberto Cortés and Carlos García-Rubio },

url = {https://link.springer.com/chapter/10.1007/978-0-387-84839-6_22

https://link.springer.com/content/pdf/10.1007/978-0-387-84839-6.pdf},

doi = {https://doi.org/10.1007/978-0-387-84839-6_22},

isbn = {978-0-387-84838-9},

year  = {2008},

date = {2008-01-09},

urldate = {2008-01-09},

booktitle = {IFIP International Federation for Information Processing},

volume = {284},

pages = {271 - 282},

publisher = {Springer US},

abstract = {User-centric services might enforce requirements difficult to be endorsed by visited networks unless tight coupled trust relations are previously established among providers. Maintaining those fixed trust relations is costly and unmanageable if the number of providers increases. Moreover, it requires providers to use a common security model, credentials, policies…Trust Negotiation can be the solution to this problem since allows to negotiate gradually a security state enabling multiple factor authentication and authorization even for “strangers” by exchanging various credentials. However, there are still two problems to solve, the first one is the delay introduced by the trust negotiation messages if used as bootstrapping in every interaction; the second one is the lack of protocol support. In this article we address those problems by presenting an extension to TLS that enables trust negotiation and credential issuing (to speed-up following interactions) over a secure channel.

},

keywords = {international telecommunication union, message authentication code, Mutual Authentication, protocol message, recursosteleeducacion, transport layer security},

pubstate = {published},

tppubtype = {inbook}

}

Close
User-centric services might enforce requirements difficult to be endorsed by visited networks unless tight coupled trust relations are previously established among providers. Maintaining those fixed trust relations is costly and unmanageable if the number of providers increases. Moreover, it requires providers to use a common security model, credentials, policies…Trust Negotiation can be the solution to this problem since allows to negotiate gradually a security state enabling multiple factor authentication and authorization even for “strangers” by exchanging various credentials. However, there are still two problems to solve, the first one is the delay introduced by the trust negotiation messages if used as bootstrapping in every interaction; the second one is the lack of protocol support. In this article we address those problems by presenting an extension to TLS that enables trust negotiation and credential issuing (to speed-up following interactions) over a secure channel.

Close
https://link.springer.com/chapter/10.1007/978-0-387-84839-6_22
https://link.springer.com/content/pdf/10.1007/978-0-387-84839-6.pdf
doi:https://doi.org/10.1007/978-0-387-84839-6_22
Close