论文信息 - Application for a Simple Device Authentication Framework: Device Authentication Middleware Using Novel Smart Card Software

Application for a Simple Device Authentication Framework: Device Authentication Middleware Using Novel Smart Card Software

Our proposed simple device authentication framework aims to provide device-oriented authentication and authorization mechanisms for non-PC Internet-ready information appliances. The purpose of the framework is to prevent device spoofing, and to restrict unauthorized access to the device in a future ubiquitous network. We have developed the novel smart card software to achieve peer to peer device-oriented PKI authentication and authorization on the secure tamper-resistant smart card. We assume that the smart card will be attached to a device such as an information appliance. In this paper, we show the prototype implementation of authentication middleware using our novel smart card software and the IKEv1 program. The IKEv1 program cooperates with our novel smart card software to achieve peer to peer production-level identity authentication for devices. Thus, our framework and its application shown in this paper help to realize secure ubiquitous computing for Internet-ready home appliances

Suguru Yamaguchi | Takeshi Okuda | Manabu Hirano

[1] Dan Harkins,et al. The Internet Key Exchange (IKE) , 1998, RFC.

[2] Craig Metz,et al. PF_KEY Key Management API, Version 2 , 1998, RFC.

[3] David Cooper,et al. Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile , 2008, RFC.

[4] Russ Housley,et al. Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile , 2002, RFC.

[5] Hiroshi Esaki,et al. USAGI IPv6 IPsec development for Linux , 2004, 2004 International Symposium on Applications and the Internet Workshops. 2004 Workshops..

[6] Hugo Krawczyk,et al. A Security Architecture for the Internet Protocol , 1999, IBM Syst. J..

[7] Randall J. Atkinson,et al. Security Architecture for the Internet Protocol , 1995, RFC.

[8] Charlie Kaufman,et al. Internet Key Exchange (IKEv2) Protocol , 2005, RFC.

[9] Stephen T. Kent,et al. Security Architecture for the Internet Protocol , 1998, RFC.

[10] Suguru Yamaguchi,et al. A proposal for a Simple Device Authentication Framework: Design and implementation of novel smart card software and its tools , 2006 .