Making serial number based authentication robust against loss of state

ABSTRACT

In this paper a novel method for making serial number based authentication protocols resilient against database failure is described. The method is applicable to the situation where a single server wishes to authenticate itself to a number of clients, but cannot reliably maintain a sequence number database. The solution has recently been included in a draft international standard for third generation mobile telecommunications, [1].

REFERENCES

• 1: 3rd Generation Partnership Project (3GPP). 3G TS 33.102 version 3.0.0 --- Technical Specification Group Services and System Aspects; 3G Security; Security Architecture, May 1999.
• 2: International Organization for Standardization, Genève, Switzerland. ISO/IEC 9798-1: 1997, Information Technology --- Security techniques --- Entity authentication --- Part 1: General, Second edition, August 1997.
• 3: Leslie Lamport, Time, clocks, and the ordering of events in a distributed system, Communications of the ACM, v.21 n.7, p.558-565, July 1978 [doi>10.1145/359545.359563]
• 4: Klaus Vedder, Security Aspects of Mobile Communications, Computer Security and Industrial Cryptography - State of the Art and Evolution, ESAT Course, p.193-210, May 21-23, 1991