کد مقاله کد نشریه سال انتشار مقاله انگلیسی نسخه تمام متن
423700 685277 2008 13 صفحه PDF دانلود رایگان
عنوان انگلیسی مقاله ISI
Trusted Directory Services for Secure Internet Connectivity: Transport Layer Security using DNSSEC
موضوعات مرتبط
مهندسی و علوم پایه مهندسی کامپیوتر نظریه محاسباتی و ریاضیات
پیش نمایش صفحه اول مقاله
Trusted Directory Services for Secure Internet Connectivity: Transport Layer Security using DNSSEC
چکیده انگلیسی

The Internet today is a highly dynamic environment which frequently requires secure communication between peers that do not have a direct trust relationship. Current solutions for establishing trust often require static and application-specific Public Key Infrastructures (PKIs). This paper presents trusted directory services as a key infrastructural technology for setting up secure Internet connections, providing an alternative to application-specific PKIs. The directory securely binds public keys to peers through their names in a flexible way that matches the dynamic nature of the Internet. We elaborate on this concept by showing how the Domain Name System (DNS) and its security extensions (DNSSEC) can be leveraged for establishing secure Transport Layer Security (TLS) connections in a dynamic way. A simple enhancement of the TLS protocol, called Extended TLS (E-TLS), required for this purpose, is proposed. We describe our E-TLS implementation and we conclude with an evaluation of our results.

ناشر
Database: Elsevier - ScienceDirect (ساینس دایرکت)
Journal: Electronic Notes in Theoretical Computer Science - Volume 197, Issue 2, 22 February 2008, Pages 91-103