KMITL

Permanent URI for this communityhttps://dspace.kmitl.ac.th/handle/123456789/1

Browse

Settings

Author: search.filters.author.Kanyamee, KanokwanSubject: search.filters.subject.Session key

Search Results

Now showing 1 - 2 of 2
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    A secure multiple-agent cryptographic key recovery system
    (2009-11-17)
    Kanyamee, Kanokwan
    ;
    Sathitwiriyawong, Chanboon
    Symmetric cryptography uses the same session key for message encryption and decryption. Without having it, the encrypted message will never be revealed. In case the session key is unavailable or government authorities need to inspect suspect messages, there should be a mechanism to recover it. The recovery of session key is usually provided by a trusted key recovery center as a coordinator among key recovery agents (KRAs). The session key will be recovered on receiving the request from those who are legitimate to view the message. Key recovery can be achieved by a single agent or multiple agents. The latter can enhance the security of the former by mitigating the risks of fabrication and collusion. This paper presents a secure multiple-agent cryptographic key recovery system (SEM-KRS) that uses the simple and flexible principles of secure session key management with appropriated design of key recovery function and the new format of key recovery field. The proposed system has high availability, ability to detect attacks on group authentication, and can recover session key despite the failure of some KRAs. Therefore, the problem of single point of failure can be avoided. System administrators also have flexibility to manage and choose the number of KRAs to meet security requirements. The system also supports law enforcement, and is based on Public Key Infrastructure to provide trusted and authenticated key distribution infrastructure. ©2009 IEEE.
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    High-availability decentralized multi-agent key recovery system
    (2009-01-01)
    Kanyamee, Kanokwan
    ;
    Sathitwiriyawong, Chanboon
    In symmetric cryptography, any two communicating parties share the secret session key. In case it is unavailable or legal investigation of transmitting messages is needed, there should be a mechanism to recover it. The recovery of session key is typically provided by trusted key recovery agents (KRAs). They will recover the session key after receiving the request from those who have the right to use the key. Key recovery can be achieved by either single agent (S-KRA) or multiple agents (M-KRA). M-KRA enhances the security of SKRA by reducing any risk of falsification and counterfeiting. This paper proposed a high-availability decentralized multiagent key recovery system without the need of key recovery center (KRC), called HADM-KRS. The proposed method uses simple and flexible principles of secure session key management with appropriated design of key recovery function and the new format of key recovery field (KRF). The system has high availability, ability to detect attacks on group authentication, and can recover session key despite the failure of some KRAs, without the need of KRC. Therefore, the problem of single point of failure of KRC can be avoided. System administrators also have flexibility to manage and choose the number of KRAs to meet security requirements. The system also supports law enforcement and is based on security mechanism using well defined features of Public Key Infrastructure (PKI). © 2009 IEEE.