Encryption-based protection for interactive user/computer communication

ABSTRACT

This paper develops a virtual connection model, complete with intruder, for interactive terminal-host communication and presents a set of protection goals that characterize the security that can be provided for a physically unsecured connection. Fundamental requirements for protocols that achieve these goals and the role of encryption in the design of such protocols are examined. Functional and security constraints on positioning of protection protocols in a communication system and the impact of positioning on the design of secure operating systems are discussed.

REFERENCES

• 1: Branstad, D., Security aspects of computer networks. Proceedings AIAA Computer Network Systems Conference, April 1973, paper 73-427.
• 2: Campbell, C., Design and specification of cryptographic capabilities. to appear in Proceedings Conference on Computer Security and the Data Encryption Standard, February 1977.
• 3: Connolly, R., Encryption standard protects data. Electronics 50, 5 (March 1977), pp. 74-75.
• 4: Cerf, V. and Kahn, R., A protocol for packet network intercommunication. IEEE Transactions on Communication 22, 5 (May 1974), pp. 637-648.
• 5: Diffie, W. and Hellman, M., A critique of the proposed Data Encryption Standard, CACM 19, 3 (March 1976), pp. 164-165.
• 6: Diffie, W. and Hellman, M., Multiuser cryptographic techniques. in 1976 NCC, AFIPS Conference Proceedings 45, (June 1976), pp. 109-112.
• 7: Farber, D. and Larson, K., Network security via dynamic process renaming. Proceedings Fourth Data Communications Symposium, October 1975 pp. 8.13-8.18.
• 8: Feinler, E. and Postel, J., Advanced Research Projects Agency, ARPA Current Network Protocols. NIC 7104, Network Information Center, SRI, Menlo Park, CA., April 1976.
• 9: Feistel, H., Cryptographic coding for data bank privacy. IBM Corporation Research Report RC 2827, March 1970.
• 10: Hellman, M., et al., Results of an initial attempt to cryptanalyze the NBS Data Encryption Standard. Stanford Center for Systems Research Information Systems Laboratoy SEL 76-042, September 1976.
• 11: IBM, Synchronous Data Link Control General Information. IBM Corporation System Reference Library, GA27-3093-0, March 1974.
• 12: International Standards Organization, TC97/SC6, Document 1005.
• 13: Kahn, D., The Codebreakers. Macmillan, 1967.
• 14: Karger, P., Non-discretionary access control for decentralized computing systems. SM Thesis, M.I.T. Dept. of Electrical Engineering and Computer Science, June 1977.
• 15: S. Kent, ENCRYPTION-BASED PROTECTION PROTOCOLS FOR INTERACTIVE USER-COMPUTER COMMUNICATION, Massachusetts Institute of Technology, Cambridge, MA, 1976
• 16: Robert M. Metcalfe , David R. Boggs, Ethernet: distributed packet switching for local computer networks, Communications of the ACM, v.19 n.7, p.395-404, July 1976 [doi>10.1145/360248.360253]
• 17: National Bureau of Standards, Data Encryption Standard. Federal Information Processing Standards Publication 46, January 1977.
• 18: et Saltzer , Technology Project MAC (Massachusetts Institute of, INTRODUCTION TO MULTICS, Massachusetts Institute of Technology, Cambridge, MA, 1974
• 19: Saltzer, J. and Schroeder, M., The protection of information in computer systems. Proceedings IEEE 63, 9 (September 1975), pp.s 1287-1308.
• 20: Schmid, P., Review of ciphering methods to achieve communication security in data transmission networks. Proceedings International Zurich Seminar of Digital Communications, March 1976.
• 21: Shannon, C., Communication theory of secrecy systems. Bell System Technical Journal 28, 4 (October 1949), pp. 656-715.

INDEX TERMS

Primary Classification:
  E. Data
  E.3 DATA ENCRYPTION
      Subjects: Standards (e.g., DES, PGP, RSA)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)
      C.2.3 Network Operations
          Subjects: Public networks

General Terms:
Human Factors, Standardization