KMITL

Permanent URI for this communityhttps://dspace.kmitl.ac.th/handle/123456789/1

Browse

Settings

Subject: search.filters.subject.Key recovery

Search Results

Now showing 1 - 4 of 4
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Item,
    High-availability decentralized cryptographic multi-agent key recovery
    (2014-01-01)
    Kanyamee, Kanokwan
    ;
    Sathitwiriyawong, Chanboon
    This paper proposes two versions for the implementation of a novel High-Availability Decentralized cryptographic Multi-agent Key Recovery System (HADM-KRS) that do not require a key recovery centre: HADM-KRSv1 and HADM-KRSv2. They have been enhanced from our previous work and entirely comply with the latest key recovery system in the National Institute of Standards and Technologies (NIST's) framework. System administrators can specify the minimum number of Key Recovery Agents (KRAs) according to security policies and requirements while maintaining compliance with legal requirements. This feature is achieved by applying the concept of secret sharing and power set to distribute the session key to participating KRAs. It uses the principle of secure session key management with an appropriate design of key recovery function. The system is designed to achieve high availability despite the failure of some KRAs. The performance evaluation results show that the proposed systems incur little processing times. They provide a security platform with good performance, fault tolerance, and robustness in terms of secrecy and availability.
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Item,
    Novel optical cryptography using PANDA ring resonator for highly secured communication
    (2011-07-01)
    Putthacharoen, Rattipong
    ;
    Juleang, Pakorn
    ;
    Mitatha, Somsak
    ;
    Yupapin, Preecha P.
    We propose a novel method of an optical cryptography using the dark-bright soliton conversion control in a modified adddrop optical filter. By using the control arrangement, the obtained outputs of the dynamic states of dark-bright soliton can be used to form the key suppression for communication security application, in which the key recovery can be obtained by controlling the adddrop filter outputs. The optical cryptography consists of an adddrop filter which is used to generate the encryption and decryption keys from the optical keys (LIP signals). A Mach-Zehnder interferometer is used for multiplexing and de-multiplexing operations. Simulation results obtained shows, that the proposed system can be used to form a high security communication system. © 2011 Society of Photo-Optical Instrumentation Engineers (SPIE).
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Item,
    A secure multiple-agent cryptographic key recovery system
    (2009-11-17)
    Kanyamee, Kanokwan
    ;
    Sathitwiriyawong, Chanboon
    Symmetric cryptography uses the same session key for message encryption and decryption. Without having it, the encrypted message will never be revealed. In case the session key is unavailable or government authorities need to inspect suspect messages, there should be a mechanism to recover it. The recovery of session key is usually provided by a trusted key recovery center as a coordinator among key recovery agents (KRAs). The session key will be recovered on receiving the request from those who are legitimate to view the message. Key recovery can be achieved by a single agent or multiple agents. The latter can enhance the security of the former by mitigating the risks of fabrication and collusion. This paper presents a secure multiple-agent cryptographic key recovery system (SEM-KRS) that uses the simple and flexible principles of secure session key management with appropriated design of key recovery function and the new format of key recovery field. The proposed system has high availability, ability to detect attacks on group authentication, and can recover session key despite the failure of some KRAs. Therefore, the problem of single point of failure can be avoided. System administrators also have flexibility to manage and choose the number of KRAs to meet security requirements. The system also supports law enforcement, and is based on Public Key Infrastructure to provide trusted and authenticated key distribution infrastructure. ©2009 IEEE.
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Item,
    High-availability decentralized multi-agent key recovery system
    (2009-01-01)
    Kanyamee, Kanokwan
    ;
    Sathitwiriyawong, Chanboon
    In symmetric cryptography, any two communicating parties share the secret session key. In case it is unavailable or legal investigation of transmitting messages is needed, there should be a mechanism to recover it. The recovery of session key is typically provided by trusted key recovery agents (KRAs). They will recover the session key after receiving the request from those who have the right to use the key. Key recovery can be achieved by either single agent (S-KRA) or multiple agents (M-KRA). M-KRA enhances the security of SKRA by reducing any risk of falsification and counterfeiting. This paper proposed a high-availability decentralized multiagent key recovery system without the need of key recovery center (KRC), called HADM-KRS. The proposed method uses simple and flexible principles of secure session key management with appropriated design of key recovery function and the new format of key recovery field (KRF). The system has high availability, ability to detect attacks on group authentication, and can recover session key despite the failure of some KRAs, without the need of KRC. Therefore, the problem of single point of failure of KRC can be avoided. System administrators also have flexibility to manage and choose the number of KRAs to meet security requirements. The system also supports law enforcement and is based on security mechanism using well defined features of Public Key Infrastructure (PKI). © 2009 IEEE.