End-to-End Key Exchange through Disjoint Paths in P2P Networks

Abstract

International audienceDue to their inherent features, P2P networks have proven to be effective in the exchange of data between autonomous peers. Unfortunately, these networks are subject to various security threats that cannot be addressed readily since traditional security infrastructures, which are centralized, cannot be applied to them. Furthermore, communication reliability across the Internet is threatened by various attacks, including usurpation of identity, eavesdropping or traffic modification. Thus, in order to overcome these security issues and allow peers to securely exchange data, we propose a new key management scheme over P2P networks. Our approach introduces a new method that enables a secret key exchange through disjoint paths in the absence of a trusted central coordination point which would be required in traditional centralized security systems

SEMOS: A Middleware for Providing Secure and Mobility-Aware Sessions over a P2P Overlay Network

“…Our future work will consist in completing and improving our current implementation as well as integrating a key management scheme suitable for dynamic networks to provide the users with a means to exchange or generate secret keys in-band. To this end, we have designed a key generation technique based on the Shamir's secret sharing method and using multiple disjoint paths in the overlay, for creating a secret key without requiring certificates such as in Diffie-Hellman [25]. We are currently evaluating this technique and we plan to insert it in the negotiation phase of a SEMOS connection.…”