A hardware-secured credential repository for grid PKIs

2004 IEEE International Symposium on Cluster Computing and the Grid, CCGrid 2004

Volumn , Issue , 2004, Pages 640-647

  Lorch, Markus ^a   Basney, Jim ^b   Kafura, Dennis ^a  

^a VIRGINIA POLYTECHNIC INSTITUTE AND STATE UNIVERSITY   (United States)

^b NCSA ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CO-PROCESSORS; NETWORK FILESYSTEMS; PUBLIC KEY INFRASTRUCTURE (PKI); TIME-CONSUMING PROCESS;

COMPUTER TERMINALS; COMPUTER WORKSTATIONS; NETWORK PROTOCOLS; PROBLEM SOLVING; SECURITY OF DATA; SMART CARDS; STORAGE ALLOCATION (COMPUTER); USER INTERFACES;

PUBLIC KEY CRYPTOGRAPHY;

EID: 4544267268     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. M. Carnut, E. Hora, and C. Mattos, "FreeICP.ORG: Free Trusted Certificates by Combining the X.509 and PGP Hierarchy Through a Collaborative Trust Scoring System", Proceedings of the 2nd Annual PKI Research Workshop, Gaithersburg, Maryland, April 2003, pp. 13-29.
2. I. Foster and C. Kesselmanm, "Globus: A Metacomputing Infrastructure Toolkit", International Journal of Supercomputer Applications, vol. 11, no. 2, 1997, pp. 115-128.
3. G. von Laszewski, I. Foster, J. Gawor, and P. Lane, "A Java Commodity Grid Kit", Concurrency and Computation: Practice and Experience, vol. 13, no. 8-9, 2001, pp. 643-662.
4. st Annual PKI Research Workshop, Gaithersburg, Maryland, April 2002, pp. 89-96.
5. J. Novotny, S. Tuecke, and V. Welch, "An Online Credential Repository for the Grid: MyProxy", Proceedings of the Tenth International Symposium on High Performance Distributed Computing (HPDC-10), IEEE Press, 2001.
6. J. Steiner, C. Neuman, and J. Schiller, "Kerberos: An Authentication Service for Open Network Systems", Proc. of the Winter 1988 Usenix Conference, February, 1988.
7. C. Neuman and T. Ts'o, "Kerberos: An Authentication Service for Computer Networks", IEEE Communications, vol. 32, no. 9, September 1994, pp. 33-38.
8. N. Itoi, "Secure Coprocessor Integration with Kerberos V5", Proceedings of the 9th USENIX Security Symposium, Denver, Colorado, August 2000.
9. J. Tardo and K. Alagappan, "SPX: Global Authentication Using Public Key Certificates", Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy, May 1991, pp. 232-244.
10. R. Butler, D. Engert, I. Foster, C. Kesselman, S. Tuecke, J. Volmer, and V. Welch, "A National-Scale Authentication Infrastructure", IEEE Computer, 33(12), December 2000, pp. 60-66.
11. M. Gasser and E. McDermott, "An Architecture for Practical Delegation in a Distributed System", IEEE Symposium on Research in Security and Privacy, May 1990, pp. 20-30.
12. Ganesan, R., "Yaksha: Augmenting Kerberos with Public Key Cryptography", Proceedings of the Symposium on Network and Distributed System Security, Februrary 1995, pp. 132-143.
13. X. Wang, "Intrusion Tolerant Password-Enabled PKT, Proceedings of the 2nd Annual PKI Research Workshop, Gaithersburg, Maryland, April 2003, pp. 44-53.
14. st Annual PKI Research Workshop, Gaithersburg, Maryland, April 2002.
15. J. Basney, W. Yurcik, R. Bonilla, and A. Slagell, "The Credential Wallet: A Classification of Credential Repositories Highlighting MyProxy", 31st Research Conference on Communication, Information and Internet Policy (TPRC 2003), Arlington, Virginia, September 2003.
16. A. Arsenault and S. Ferrell, "Securely Available Credentials - Requirements", IETF RFC 3157, 2001.
17. Y. Hsu and S. Seymour, "An Intranet Security Framework Based on Short-Lived Certificates", IEEE Internet Computing, vol. 2, no. 2, April 1998, pp. 73-79.
18. O. Kornievskaia, P. Honeyman, B. Doster, and K. Coffman, "Kerberized Credential Translation: A Solution to Web Access Control", USENIX Security Symposium, 2001.
19. L. Zhou, F. B. Schneider, and R. van Renesse, "COCA: A Secure Distributed On-line Certification Authority", ACM Transactions on Computer Systems, vol. 20, no. 4, November 2002, pp. 329-368.
20. th USENIX Security Symposium, Washington, DC, August 2003, pp 45-68.
21. RSA Laboratories, "PKCS #11 v2.11: Cryptographic Token Interface Standard", RSA Security Inc. Public-Key Cryptography Standards (PKCS), November 2001.
22. J. R. Salzer and M. D. Schroeder, "The Protection of Information in Computer Systems", Proceedings of the IEEE, Vol 63, No. 9, September 1975, pp. 1278-1308.