LIPKEY - A Low Infrastructure Public Key Mechanism Using SPKM

Eisler, M.

doi:10.17487/rfc2847

Cited by 7 publications

(4 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The GSS API, which is apparently becoming standard for the security in the file systems, is present in the mainline kernel, but the support of a public key infrastructure is somewhat limited. There is no support for the LIPKEY [7] implementation and the SPKM [1] implementation relies on a user space helper process that is a part of the NFS bundle (it is a part of the nfs-util package). For that reason, the GSS API has not been chosen, though it may be reconsidered in a future, when GSS becomes more widely supported.…”

Section: Methodsmentioning

confidence: 99%

File System Security in the Environment of Non-dedicated Computer Clusters

Lee

Park

Woo

2007

Eighth International Conference on Parallel and Distributed Computing, Applications and Technologies (PDCAT 2007)

View full text Add to dashboard Cite

Clusters built from commodity computers are popular because of their cost efficiency. There are two basic types of such clusters. A prevalent type is a dedicated cluster where all machines participating in the cluster belong to a single administrative domain. Then there are non-dedicated clusters, where the cluster itself forms its own administrative domain, but the participating computers retain their own administrative domains. Non-dedicated clusters have a better potential for attracting computer owners to participate in a cluster, as they do not have to give up control over their computers. On the other hand, these clusters have much higher security demands than the dedicated ones. In this paper, we focus on the security issues of distributed file systems in the environment of the non-dedicated clusters. We will identify the issues implied by the environment, propose our solution, and demonstrate the feasibility by the experimental implementation.

show abstract

Section: Methodsmentioning

confidence: 99%

File System Security in the Environment of Non-dedicated Computer Clusters

Lee

Park

Woo

2007

Eighth International Conference on Parallel and Distributed Computing, Applications and Technologies (PDCAT 2007)

View full text Add to dashboard Cite

show abstract

“…It increases the protection security of the data and also provides nature or characteristics of the data to be factored for security. But when considering the real time factors involved in the data transmission setting, this broad regulation often proves to be not viab le [7]. For the selection of suitable encryption points, the following parameters and impacts shall be well thought out for the selection procedures.…”

Section: Encryption Pointmentioning

confidence: 99%

Key Escrow with Elliptic Curve Cryptography – Conceptual Framework for Distributed Mobile Networks

Sugumar¹,

Ramakrishnan²

2018

IJEECS

View full text Add to dashboard Cite

In the large scale distributive environment involving mobile network, metadata server and storage applications, the data access and the security measures are of paramount importance. In parallel application processing, data is distributed across multiple servers and storage location. Ensuring confidentiality and availability of the data to the authorised users at the appropriate time involves high level of encryption algorithms, key management schemes and security algorithms. In this paper, key escrow scheme is implemented with the light weighted symmetric algorithm, elliptic curve cryptography in the distributed environment. Key escrow centre is established along with the metadata server and the encryption keys are segmented and shared among the multiple sub agents using Shamir threshold sharing scheme. The implementation of Key Escrow mechanism with Elliptical Curve Cryptography provides wide range of flexibility and confidentiality in the distributed environment. It also eliminates private secret sub key problem and thereby ensuring better security.

show abstract

“…Strong security has not been available until the latest version (V4 [40]), which mandates the support of the RPCSEC_GSS flavor [14]. RPCSEC_GSS provides RPC-layer security based on the GSS-API [30], and a conforming NFS V4 implementation must support two security mechanisms, Kerberos V5 [31] and LIPKEY [13].…”

Section: Secure Distributed File Systemmentioning

confidence: 99%

A user-level secure grid file system

Zhao

Figueiredo

2007

Proceedings of the 2007 ACM/IEEE Conference on Supercomputing

View full text Add to dashboard Cite

A grid-wide distributed file system provides convenient data access interfaces that facilitate fine-grained cross-domain data sharing and collaboration. However, existing widely-adopted distributed file systems do not meet the security requirements for grid systems. This paper presents a Secure Grid File System (SGFS) which supports GSI-based authentication and access control, end-to-end message privacy, and integrity. It employs user-level virtualization of NFS to provide transparent grid data access leveraging existing, unmodified clients and servers. It supports user and application-tailored security customization per SGFS session, and leverages secure management services to control and configure the sessions. The system conforms to the GSI grid security infrastructure and allows for seamless integration with other grid middleware. A SGFS prototype is evaluated with both file system benchmarks and typical applications, which demonstrates that it can achieve strong security with an acceptable overhead, and substantially outperform native NFS in wide-area environments by using disk caching.

show abstract

LIPKEY - A Low Infrastructure Public Key Mechanism Using SPKM

Cited by 7 publications

References 15 publications

File System Security in the Environment of Non-dedicated Computer Clusters

File System Security in the Environment of Non-dedicated Computer Clusters

Key Escrow with Elliptic Curve Cryptography – Conceptual Framework for Distributed Mobile Networks

A user-level secure grid file system

Contact Info

Product

Resources

About