Design of information security transmission scheme and related authentication services based on Kerberos
DOI:
https://doi.org/10.54097/hset.v60i.10533Keywords:
Online security; identity authentication; kerberos; encryption algorithm; kerberos authentication configuration.Abstract
A plethora of cloud service companies have sprung up in response to the growing amount of data. Data security protection solutions have been proposed by service providers. As a result, a rising number of people are using the cloud to store their own data. However, as technology advances and hackers' capabilities increase, service providers' protection mechanisms become less effective, and data security cannot be guaranteed. We review the logic of the Kerberos algorithm and discuss the work of each part in this paper. This document also includes and discusses difficulties with Kerberos, as well as improvement strategies.The main focus will be on strengthening the security of the Kerberos secure communication process, which will serve as a reference for Kerberos security transmission and authentication research. It solves the problem of the symmetric encryption algorithm's relatively low security in the authentication process by replacing it with the RSA one-time encryption algorithm; in addition, the Kerberos authentication protocol is added between the client and the cloud service provider to secure the data transmission process. Furthermore, this paper explains some basic authentication principles.
Downloads
References
Bhatia, A., Xiong, C., Zhang, F., Kumar, N., & Cai, Y. (2019). U.S. Patent No. 10,403,372. Washington, DC: U.S. Patent and Trademark Office.
Neuman, B. C., & Ts'o, T. (1994). Kerberos: An authentication service for computer networks. IEEE Communications magazine, 32(9), 33-38.
Malar, M. B. A., & Prabhu, J. (2020). Trust based authentication scheme (tbas) for cloud computing environment with Kerberos protocol using distributed controller and prevention attack. International Journal of Pervasive Computing and Communications.
Saltzer, J. H. (2021). On the Origin of Kerberos. IEEE Annals of the History of Computing, 43(1), 89-91.
Anita Narwal and Sunita Tomar. (2015). Kerberos Protocol: A Review. International Journal of Engineering Research and, V4(04).
Fatima, S., & Ahmad, S. (2021). Quantum Key Distribution Approach for Secure Authentication of Cloud Servers. International Journal of Cloud Applications and Computing (IJCAC), 11(3), 19-32.
Bhagwat, P., Tapkir, V., Andure, K., & Sorte, K. Single Sign on for Secure Authentication of Web Services using Kerberos.
Lu, Y., Yu, K., & Lv, X. (2021). Image encryption with one-time password mechanism and pseudo-features. Multimedia Tools and Applications, 80(10), 15041-15055.
Ashok Kumar J and Gopinath Ganapathy. (2019). Kerberos Authorization with Hybrid Access Control Model in Public Cloud. International Journal of Recent Technology and Engineering (IJRTE), 8(4), pp. 7267-7271.
Uahhabi, Z. E., & Bakkali, H. E. (2018). Trust assessment of X. 509 certificate based on certificate authority trustworthiness and its certificate policy. International Journal of Internet Technology and Secured Transactions, 8(1), 103-136.
Kent, J. J. (2018). U.S. Patent No. 10,063,536. Washington, DC: U.S. Patent and Trademark Office.
Lippert, M., Karatsiolis, E. G., Wiesmaier, A., & Buchmann, J. (2005, May). Directory Based Registration in Public Key Infrastructures. In IWAP (pp. 17-32).
Adja, Y. C. E., Hammi, B., Serhrouchni, A., & Zeadally, S. (2021). A blockchain-based certificate revocation management and status verification system. Computers & Security, 104, 102209.
Yu, L., Yang, Z. Y., & Zhuo, Z. P. (2021). Extension of PCL Theory and Its Application in Improved CCITT X. 509 Analysis. International Journal of Network Security, 23(2), 305-313.
Ceccanti, A., Vianello, E., & Giacomini, F. (2020). Beyond X. 509: token-based authentication and authorization in practice. In EPJ Web of Conferences (Vol. 245, p. 03021). EDP Sciences.
Downloads
Published
Issue
Section
License

This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.







