Secure password-based authenticated key exchange for web services

Proceedings of the 2004 Workshop on Secure Web Service, SWS 2004

Volumn , Issue , 2015, Pages 9-15

  Fang, Liang ^a   Meder, Samuel ^b   Siebenlist, Frank ^c   Chevassut, Olivier ^d  

^a INDIANA UNIVERSITY   (United States)

^b THE UNIVERSITY OF CHICAGO   (United States)

^c ARGONNE NATIONAL LABORATORY   (United States)

^d LAWRENCE BERKELEY NATIONAL LABORATORY   (United States)

Author keywords

Authenticated key exchange; Password; Security; Web services

Indexed keywords

AUTHENTICATION; CRYPTOGRAPHY; SPECIFICATIONS; TELECOMMUNICATION SERVICES; WEBSITES;

AUTHENTICATED KEY EXCHANGE; AUTHENTICATION PROTOCOLS; CRYPTOGRAPHIC METHODS; PASSWORD; PASSWORD-BASED AUTHENTICATION; SECURITY; WEB SERVICES SECURITY; WS-SECURECONVERSATION;

WEB SERVICES;

EID: 84954143983     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1111348.1111350     Document Type: Conference Paper

References (24)

1. Abdalla M, Chevassut O, Pointcheval D, "One-Time Verifier-based Encrypted Key Exchange", 8th International Workshop on Practice and Theory in Public Key Cryptography (PKC), Jan 2005.
2. Bellare M. and Rogaway P., The AuthA Protocol for Password-based Authenticated Key Exchange. March 14, 2000.
3. Bellovin S. M. and Merritt M., Encrypted Key Exchange: Password-Based Protocols Secure against Dictionary Attack, the Proc. Of the Symposium on Security and Privacy, IEEE, 1992, pp. 72-84.
4. Bresson E., Chevassut O., and Pointcheval D., New Security Results on Encrypted Key Exchange, the 7th International Workshop on Theory and Practice in Public Key Cryptography, March, 2004.
5. Bresson E., Chevassut O., and Pointcheval D., Security Proofs for an Efficient Password-Based Key Exchange, the 10th ACM Conference on Computer and Communication Security, Oct., 2003.
6. Diffie W. and Hellman M., New directions in cryptography, IEEE Transactions on Information Theory IT-22, 6 (Nov.), 1976, pp. 644-654.
7. Foster I., Kesselman C., Nick J. and Tuecke S. The Physiology of the Grid: An Open Grid Services Architecture for Distributed Systems Integration, Globus Project, 2002. http://www.globus.org/research/papers/ogsa.pdf.
8. Foster I., Kesselman C., Globus: A Metacomputing Infrastructure Toolkit, Intl J. Supercomputer Applications, 11(2):115-128, 1997.
9. Foster I. and Kesselman C., Computational Grids. Foster I. and Kesselman C. eds., The Grid: Blueprint for a New Computing Infrastructure, Morgan Kaufmann, 1999, 248. 2002.
10. Novotny J., Tuecke S., and Welch V., An Online Credential Repository for the Grid: MyProxy, Proceedings of the Tenth International Symposium on High Performance Distributed Computing (HPDC-10), IEEE Press, Aug. 2001.
11. Shirasuna S., Slominski A., Fang L., and Gannon D., Performance Comparison of Security Mechanisms for Grid Services, the 5th IEEE/ACM International Workshop on Grid Computing, Pittsburgh, Nov. 8, 2004.
12. Steiner M., Buhler P., Eirich T., and Waidner M., Secure Password-Based Cipher Suite for TLS, the Proceedings of Network and Distributed Systems Security Symposium, San Diego, CA, Feb. 3-4, 2000, pp. 129-142.
13. Taylor D., Wu T., Mavroyanopoulos N., and Perrin T., Using SRP for TLS Authentication, TLS Working Group, IETF Internet Draft, August 2004.
14. Welch V., Siebenlist F., Foster I., Bresnahan J., Czajkowski K., Gawor J., Kesselman C., Meder S., Pearlman L., Tuecke S., Security for Grid Services, Twelfth International Symposium on High Performance Distributed Computing (HPDC-12), IEEE Press, June 2003.
15. Welch V., Foster I., Kesselman C., Mulmo O., Pearlman L., Tuecke S., Gawor J., Meder S., Siebenlist F., X.509 Proxy Certificates for Dynamic Delegation, 3rd Annual PKI R&D Workshop, 2004.
16. Apache Web Services Project, Axis, http://ws.apache.org/axis.
17. Apache WSS4J, http://ws.apache.org/ws-fx/wss4j.
18. BEA, Computer Associates, IBM, Layer7, Microsoft, Netegrity, Oblix, OpenNetwork, Ping Identity, Reactivity, RSA Security, VeriSign, Westbridge, Web Services Trust Language, March 2004. "http://msdn.microsoft.com/library/enus/dnglobspec/html/ws-trust.asp".
19. IETF, A One-Time Password System (RFC 2289), February, 1998. http://www.ietf.org/rfc/rfc2289.txt.
20. Legion of Bouncy Castle, Bouncy Castle library, http://www.bouncycastle.org.
21. OASIS, "Web Service Resource Framework", March 2004.
22. OASIS, "Web Services Security: SOAP Message Security" March 15 2004.
23. BEA, Computer Associates, IBM, Layer7, Microsoft, Netegrity, Oblix, OpenNetwork, Ping Identity, Reactivity, RSA Security, VeriSign, Westbridge, "Web Services Secure Conversation Language" May 2004. "http://msdn.microsoft.com/library/enus/dnglobspec/html/ws-secureconversation.asp".
24. Open Grid Services Architecture, OGSA-working-group at GGF, https://forge.gridforum.org/projects/ogsa-wg.