The week's pick
Random Articles
Reseach Article
Implementation of highly efficient Authentication and Transaction Security
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 21 - Number 3 |
| Year of Publication: 2011 |
| Authors: Garima Verma, R.P. Arora |
10.5120/2489-3358
|
Garima Verma, R.P. Arora . Implementation of highly efficient Authentication and Transaction Security. International Journal of Computer Applications. 21, 3 ( May 2011), 43-49. DOI=10.5120/2489-3358
Abstract
Kerberos is a network authentication protocol & is designed to provide strong authentication for client/server applications by using secret-key cryptography. Our research was aimed at enhancing the security of transactions over a network. In this paper, we used Kerberos Encryption Technique for authentication and transaction security in the network. Further, we created an Authentication Server that used to derive a 64 bit key from user’s password. This password was of arbitrary length. The generated key then was used by authentication server, to encrypt ticket granting ticket + session key. The key generated by authentication server was then used by the client at the time of transaction through the transaction server to validate an authentic transaction. However, there was an issue of cross-validation of the ticket by the transaction server for which we included a database and encryption of all the text sent by any client to the transaction server.
References
- Prof R.P. Arora, Garima Verma, “Implementation of Authentication and Transaction Security based on Kerberos”, IJITCE, Feb 2011 7.
- Dr. S. Santhosh Baboo, K. Gokulraj, “A Secure Dynamic Authentication Scheme for Smart Card based Networks”, International Journal of Computer Applications, Number 8- Article 2, pp. 1605-2157, 2010
- K. Aruna et. al (2010), “A new collaborative trust enhanced security model for distributed systems”. International Journal of Computer Application, No-26
- Steve Mallard(2010), “Methods of authentication”, Bright Hub
- Hongjun liu et. al(2008), “A distributed expansible authentication model based on Kerberos” Journal of Network and Computer Application, Vol.31, Issue 4
- Dr.Mohammad N. Abdullah & May T. Abdul-Hadi, “A Secure Mobile Banking Using Kerberos Protocol”, Engg & Technology Journal, Vol 27, No 6, 2009.
- “How Kerberos Authentication Works”, Network on line magazine, Jan 2008
- “How Kerberos Authentication Works“,Learn Networking on line magazine, Jan’2008
- Frederick Butler,, Iliano Cervesato, Aaron D. Jaggard, Andre Scedrov and Christopher Walstad, “Formal Analysis of Kerberos 5”, Sep 2006
- Rong Chen, Yadong Gui and Ji Gao, “Modification on Kerberos Authentication Protocol in Grid Computing Environment”, vol 3032, 2004.
- I. Cervesato,A. D. Jaggard,A. Scedrov,C. Walstad, “Specifying Kerberos 5 cross-realm authentication”,vol 3032, 2004.
- “Security of Network Identity: Kerberos or PKI”, System News (2002), Vol.56, Issue-II
- Ian Downnard, “Public-key cryptography extensions into Kerberos”. IEEE Potentials 2002.
- B. Clifford Neuman and Theodore Ts'o, Kerberos: An Authentication Service for Computer Networks, IEEE Communications 32 (1994), no. 9, 33--38.
- MIT Kerberos Website, “ http://web.mit.edu/kerberos/www”.
- William Stallings, “Cryptography and Network Security”, Third Edition.
- Ravi Ganesan, “Yaksha’ : Augmenting Kerberos with Public Key cryptography”.
- John E. Canavan, “Fundamentals of Network Security”.
- Chris Brenton with Cameron hunt , “ ACTIVE DEFENCE A comprehensive guide to network security”
Index Terms
Keywords