Separating key management from file system security

ABSTRACT

No secure network file system has ever grown to span the Internet. Existing systems all lack adequate key management for security at a global scale. Given the diversity of the Internet, any particular mechanism a file system employs to manage keys will fail to support many types of use.We propose separating key management from file system security, letting the world share a single global file system no matter how individuals manage keys. We present SFS, a secure file system that avoids internal key management. While other file systems need key management to map file names to encryption keys, SFS file names effectively contain public keys, making them self-certifying pathnames. Key management in SFS occurs outside of the file system, in whatever procedure users choose to generate file names.Self-certifying pathnames free SFS clients from any notion of administrative realm, making inter-realm file sharing trivial. They let users authenticate servers through a number of different techniques. The file namespace doubles as a key certification namespace, so that people can realize many key management schemes using only standard file utilities. Finally, with self-certifying pathnames, people can bootstrap one key management mechanism using another. These properties make SFS more versatile than any file system with built-in key management.

REFERENCES

• 1: Mihir Bellare , Phillip Rogaway, Random oracles are practical: a paradigm for designing efficient protocols, Proceedings of the 1st ACM conference on Computer and communications security, p.62-73, November 03-05, 1993, Fairfax, Virginia, United States [doi>10.1145/168588.168596]
• 2: Mihir Bellare and Phillip Rogaway. Optimal asymmetric encryption--how to encrypt with RSA. In A. De Santis, editor, Advances in Cryptology---Eurocrypt 1994, volume 950 of Lecture Notes in Computer Science, pages 92-111. Springer- Verlag, 1995.
• 3: Mihir Bellare and Phillip Rogaway. The exact security of digital signatures--how to sign with RSA and Rabin. In U. Maurer, editor, Advances in Cryptolog3~---Eurocrypt 1996, volume 1070 of Lecture Notes in Computer Science, pages 399-416. Springer-Verlag, 1996.
• 4: Andrew D. Birrell, Andy Hisgen, Chuck Jerian, Timothy Mann, and Garret Swart. The Echo distributed file system. Technical Report 111, Digital Systems Research Center, Palo Alto, CA, September 1993.
• 5: Andrew D. Birrell, Butler W. Lampson, Roger M. Needham, and Michael D. Schroeder. A global authentication service without global trust. In Proceedings of the 1986 IEEE Symposium on Security and Privacy, pages 223-230, Oakland, CA, 1986.
• 6: B. Callaghan, B. Pawlowski, and P. Staubach. NFS version 3 protocol specification. RFC 1831, Network Working Group, June 1995.
• 7: Carl M. Ellison, Bill Frantz, Butler Lampson, Ron Rivest, Brian M. Thomas, and Tatu Y16nen. SPKI certificate documentation. Work in progress, from http:// www. clark, net/pub/cme/html/spki, html.
• 8: FIPS 180-1. Secure Hash Standard. U.S. Department of Commerce/N.I.S.T., National Technical Information Service, Springfield, VA, April 1995.
• 9: FIPS 186. Digital Signature Standard. U.S. Department of Commerce/N.I.S.T., National Technical Information Service, Springfield, VA, 1994.
• 10: Alan O. Freier, Philip Karlton, and Paul C. Kocher. The SSL protocol version 3.0. Internet draft (draft-freier-ssl-version3- 02.txt), Network Working Group, November 1996. Work in progress.
• 11: John S. Heidemann , Gerald J. Popek, File-system development with stackable layers, ACM Transactions on Computer Systems (TOCS), v.12 n.1, p.58-89, Feb. 1994 [doi>10.1145/174613.174616]
• 12: John H. Howard , Michael L. Kazar , Sherri G. Menees , David A. Nichols , M. Satyanarayanan , Robert N. Sidebotham , Michael J. West, Scale and performance in a distributed file system, ACM Transactions on Computer Systems (TOCS), v.6 n.1, p.51-81, Feb. 1988 [doi>10.1145/35037.35059]
• 13: Kalle Kaukonen and Rodney Thayer. A stream cipher encryption algorithm "arcfour". Internet draft (draft-kaukonencipher-arcfour-03), Network Working Group, July 1999. Work in progress.
• 14: Michael L. Kazar, Bruce W. Leverett, Owen T. Anderson, Vasilis Apostolides, Beth A. Bottos, Sailesh Chutani, Craig F. Everhart, W. Anthony Mason, Shu-Tsui Tu, and Edward R. Zayas. DEcorum file system architectural overview. In Proceedings of the Summer 1990 USENIX, pages 151-163, Anaheim, CA, 1990. USENIX.
• 15: S. Kent and R. Atkinson. Security architecture for the internet protocol. RFC 2401, Network Working Group, November 1998.
• 16: Butler Lampson , Martín Abadi , Michael Burrows , Edward Wobber, Authentication in distributed systems: theory and practice, ACM Transactions on Computer Systems (TOCS), v.10 n.4, p.265-310, Nov. 1992 [doi>10.1145/138873.138874]
• 17: Timothy Mann , Andrew Birrell , Andy Hisgen , Charles Jerian , Garret Swart, A coherent distributed file cache with directory write-behind, ACM Transactions on Computer Systems (TOCS), v.12 n.2, p.123-164, May 1994 [doi>10.1145/176575.176577]
• 18: John K. Ousterhout. Why aren't operating systems getting faster as fast as hardware? In Summer USENIX '90, pages 247-256, Anaheim, CA, June 1990.
• 19: Niels Provos and David Mazibres. A future-adaptable password scheme. In Proceedings of the 1999 USENIX, Freenix track (the on-line version), Monterey, CA, June 1999. USENIX. from http://www, usenix, org/events/ usenix99/provos, html.
• 20: Peter Reiher, Jr. Thomas Page, Gerald J. Popek, Jeff Cook, and Stephen Crocker. Truffles a secure service for widespread file sharing. In Proceedings of the PSRG Workshop on Network and Distributed System Security, pages 101- 119, San Diego, CA, 1993.
• 21: Ronald L. Rivest and Butler Lampson. SDSI--a simple distributed security infrastructure. Working document from http://theory, lcs .mit. edu/~cis/sdsi, html.
• 22: Mendel Rosenblum , John K. Ousterhout, The design and implementation of a log-structured file system, Proceedings of the thirteenth ACM symposium on Operating systems principles, p.1-15, October 13-16, 1991, Pacific Grove, California, United States
• 23: Russel Sandberg, David Goldberg, Steve Kleiman, Dan Walsh, and Bob Lyon. Design and implementation of the Sun network filesystem. In Proceedings of the Summer 1985 USENIX, pages 119-130, Portland, OR, 1985. USENIX.
• 24: M. Satyanarayanan, Integrating security in a large distributed system, ACM Transactions on Computer Systems (TOCS), v.7 n.3, p.247-280, Aug. 1989 [doi>10.1145/65000.65002]
• 25: Mahadev Satyanarayanan, Scalable, Secure, and Highly Available Distributed File Access, Computer, v.23 n.5, p.9-18, 20-21, May 1990 [doi>10.1109/2.53351]
• 26: Bruce Schneier, Description of a New Variable-Length Key, 64-bit Block Cipher (Blowfish), Fast Software Encryption, Cambridge Security Workshop, p.191-204, December 09-11, 1993
• 27: R. Srinivasan. RPC: Remote procedure call protocol specification version 2. RFC 1831, Network Working Group, August 1995.
• 28: R. Srinivasan. XDR: External data representation standard. RFC 1832, Network Working Group, August 1995.
• 29: J. G. Steiner, B. C. Neuman, and J. I. Schiller. Kerberos: An authentication service for open network systems. In Proceedings of the Winter 1988 USENIX, pages 191-202, Dallas, TX, February 1988. USENIX.
• 30: Mohammad Amin Vahdat , Thomas E. Anderson , John D. Kubiatowicz, Operating system services for wide-area applications, 1998
• 31: Hugh C. Williams. A modification of the RSA public-key encryption procedure. IEEE Transactions on Information Theory, IT-26(6):726-729, November 1980.
• 32: Edward Wobber , Martín Abadi , Michael Burrows , Butler Lampson, Authentication in the Taos operating system, ACM Transactions on Computer Systems (TOCS), v.12 n.1, p.3-32, Feb. 1994 [doi>10.1145/174613.174614]
• 33: Thomas Wu. The secure remote password protocol. In Proceedings of the 1998 Internet Society Network and Distributed System Security Symposium, pages 97-111, San Diego, CA, March 1998.
• 34: Tatu Y1Onen. SSH- secure login connections over the Internet. In Proceedings of the 6th USENIX Security Symposium, pages 37-42, San Jose, CA, July 1996.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS

General Terms:
Design