Journal of the Korea Institute of Information and Communication Engineering (한국정보통신학회논문지)

The Korea Institute of Information and Commucation Engineering (한국정보통신학회)
권호 표지

Design of an Advanced Kerbros P2P Authentication System to Share Digital Content

디지털 콘텐츠 공유를 위한 개선된 Kerberos P2P 인증시스템 설계

  • Published : 2004.11.01
Download PDF
⟨ Previous Next ⟩

Abstract

In the paper, an algorithm fitted to P2P system was proposed by improving Kerberos which is an algorithm for mutual authentication. To keep the role of Kerberos and minimize load to server, the proposed algorithm imposed the server role of ticket recognition to the opposite peer. Using this method, the number of sewers as ticket recognition server was averted and function of server for authentication was minimized so that server load was mininized. The proposed algorithm enables the server to play the minimum of the role and to perform strong mutual authentication, while imposeing on the peers the role of authentication. To make suitable to P2P system, trial number oriented authentication limit was given, not time-oriented authentication expiration time. In the paper, a new P2P system was designed using this algorithm.

본 논문에서는 상호 인증을 위한 알고리즘인 Kerberos를 개선하여 P2P 시스템에 적합한 알고리즘을 제안하였다. 제안된 알고리즘은 Kerberos의 기능은 유지하면서 서버의 부담을 최소화하기 위하여 티켓 승인 서버의 기능을 상대측의 Peer에 부여하였다. 이러한 방법을 이용하여 티켓 승이 서버를 위한 서버의 개수 증가를 막고, 인증을 위한 서버의 기능을 최소화하여 서버의 부담을 최소화하였다. 제안된 알고리즘은 상호 인증을 위하여 서버는 최소한의 역활만하고, Peer간에 인증의 역할을 부여하면서도 강력한 상호 인증을 할 수 있다. 또한 P2P 시스템에 맞도록 시간위주의 인증 만료 시간보다 횟수 위주의 인증 제한 값을 주었다. 또한 본 논문에서는 이러한 알고리즘을 적용하여 P2P 인증 시스템을 설계하였다

Keywords

References

  1. David Barkai, Peer-to-Peer Architecture Group, Microcomputer Research Lab andIntel Corporation, 'An Introduction toPeer-to-Peer Computing', Inte1RDev1oper-UPDATE Magazine, pp.1-7, February 2000
  2. I. Foster, C. Kesselman, G. Tsudik, S.Tuecke. 'A Security Architecture forComputational Grids.' Prpc. 5th ACMComference on Computer andCommunications Security Conference, pp.83-92, 1998
  3. Azzedin, F.; Maheswaran, M.; 'Towardstrust-aware resourece management in Gridcomputing systems,' Cluster Computing andthe Grid 2nd IEEE/ACM InternationalSymposium CCGRID2002, 21-24, pp. 419-424,May 2002
  4. Kant, K., lyer, R., and Tewari, V.;'Aframework for dassifying peer-to-peertechnologies', Cluster Computing and theGrid 2nd IEEE/ACM InternationalSymposium CCGRID2002, 21-24, pp. 338-345,May 2002
  5. J. Kohl and C. Neuman, 'The KerberosNetwork Authentication Service(V5),' RFC1510, September, 1993