Vault A Secure Binding Service拱顶安全绑定服务.pptVIP

Vault: A Secure Binding Service Guor-Huar Lu, Changho Choi, Zhi-Li Zhang University of Minnesota What are binding services? A binding service: Stores bindings (a key,value pair) Translates (binding) key into (binding) values. DNS is a good example maps hostnames into IP addresses Reverse lookup maps IP addresses into hostnames Other example: SIP registrars, location service in MANET, etc. Outline Binding Services Motivation, Challenges and Approach Vault Evaluation Conclusion Generic Binding Services What is generic binding services? Internet-scale infrastructure service Allows arbitrary key-value pairs Many applications can use the same infrastructure Why is it different from typical lookup service? Ownership is essential E.g., in reverse DNS lookup the key (IP address) gives no indication of the owner. Security is important! Secure Binding Services Two minimum requirements: Only the owner can update or delete its bindings The binding returned must be the correct one deposited by the owner Must be robust against “man-in-the-middle” attacks An attacker between users and the service can intercept and modify messages Objective A generic binding service that is Scalable Robust Secure Distributed Hash Table (DHT) Takes care of scalability and robustness Semantic free, flat id space allows generality What about security? RSA/PKI enough? Not really.. Other crypto-mechanisms? Example: Binding service using DHT Similar to DHT’s put/get operations. B=(k,v), idk=H(k) RSA/PKI approach Not robust against “man-in-the-middle” attacks Users can sign their requests Signatures can be easily replaced Using Certificates? only if the binding key is part of the owner id. Key problem: need to verify the association between user id and public key Need another secure binding service! Our approach: using IBE In identity-based encryption (IBE) identity is the public key! Private key can be generated on-demand Key idea: use IBE to establish secure channels between users and the system. Robu