Applicability of identity-based cryptography for disruption-tolerant networking

ABSTRACT

Traditional approaches for communication security do not work well in disruption- and delay-tolerant networks (DTNs). Recently, the use of identity-based cryptography (IBC) has been proposed as one way to help solve some of the DTN security issues. We analyze the applicability of IBC in this context and conclude that for authentication and integrity, IBC has no significant advantage over traditional cryptography, but it can indeed enable better ways of providing confidentiality. Additionally, we show a way of bootstrapping the needed security associations for IBC use from an existing authentication infrastructure.

REFERENCES

• 1: Kevin Fall, A delay-tolerant network architecture for challenged internets, Proceedings of the 2003 conference on Applications, technologies, architectures, and protocols for computer communications, August 25-29, 2003, Karlsruhe, Germany [doi>10.1145/863955.863960]
• 2: A. Seth, U. Hengartner, and S. Keshav, "Practical security for disconnected nodes," in First Workshop on Secure Network Protocols (NPSec), November 2005. Revised 2006 version of the NPSec paper http://www.cs.uwaterloo.ca/~3seth/practical security v2.pdf.
• 3: S. Symington, S. Farrell, and H. Weiss, Bundle Security Protocol Specification. IRTF, DTN research group, October 2006. Draft version -02; expires in April 2007.
• 4: S. Farrell, S. Symington, and H. Weiss, Delay-Tolerant networking security overview. IRTF, DTN research group, October 2006. Draft version -02; expires in April 2007.
• 5: Dan Boneh , Matthew K. Franklin, Identity-Based Encryption from the Weil Pairing, Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology, p.213-229, August 19-23, 2001
• 6: Craig Gentry , Alice Silverberg, Hierarchical ID-Based Cryptography, Proceedings of the 8th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology, p.548-566, December 01-05, 2002
• 7: N. Asokan and L. Tarkkala, "Issues in initializing security," in Proc. Fifth IEEE Intl. Symposium on Signal Processing and Information Technology, pp. 460 -- 465, IEEE Press, December 2005.
• 8: P. Laitinen et al., "Extending cellular authentication as a service," in Proc. First IEE Intl. Conf. on Commercialising Technology and Innovation, September 2005. http://www-admin.iee.org/OnComms/PN/communications/062%20-%20P%20Ginzboorg.pdf

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

General Terms:
Design, Security

Keywords:
disruption- and delay-tolerant networking, identity-based cryptography, initializing security