Design of Mobile Public Key Infrastructure (M-PKI) Using Elliptic Curve Cryptography

Sangram Ray1 and G. P. Biswas2  

1Department of Computer Science and Engineering, Indian School of Mines, Dhanbad826004, India 

2Department of Computer Science and Engineering, Indian School of Mines, Dhanbad826004, India 

Abstract

Recently the demand of mobile phones and their applications are increasing rapidly and as a result, it becomes essential to design and/or improve the existing PKI (Public Key Infrastructure) useful for mobile phones or devices. Since a mobile phone has small screen, low computing power, small storage capacity etc, the present paper proposes an ECC-based mobile-PKI that overcomes these limitations and supports various mobile-based applications, because the use of ECC significantly reduces the computation cost, message size and transmission overhead over RSA based PKI as 160-bit key-size in ECC provides comparable security with 1024-bit key in RSA. Also the proposed method includes a Mobile Home Agent (MHA) per user and a Registration Authority (RA) that further minimize the major work/processing loads of mobile phone and Certificate Authority (CA), respectively. This paper addresses a secure implementation of the proposed M-PKI, whose security analysis against different attacks shows that all attacks are protected. Finally, a comparative study of the M-PKI with the existing PKI is done, which gives satisfactory performance.

Keywords

Elliptic Curve Cryptography (ECC), Public Key Infrastructure (PKI), Wireless Application Protocol (WAP), Certificate Authority (CA), Registration Authority (RA), Mobile Home Agent (MHA), Wireless Certificate Management Protocol (WCMP)'

Pdf Url

https://wireilla.com/papers/ijcis/V3N1/3113ijcis04.pdf

Comments

Post a Comment

Popular posts from this blog

Image
 # communication protocol # bandwidth #wirelessnetworks #mobilenetworks #cryptography #wirelesscomputing #mobilecomputing #adhocsensornetworks # telecommunications # network service Submit Your Research Articles ...!!! 15th International Conference on Wireless & Mobile Networks (WiMoNe 2023) June 17 ~ 18, 2023, Sydney, Australia Webpage URL - https://cseit2023.org/wimone/index Submission Deadline    :    April 08,2023 Submission  URL - https://cseit2023.org/submission/index.php Contact Us : wimone@cseit2023.org
Read more

A DEFENSE MECHANISM FOR CREDIT CARD FRAUD DETECTION

Image
A DEFENSE MECHANISM FOR CREDIT CARD FRAUD DETECTION   M.Sasirekha , Sumaiya Thaseen   and Saira Banu School of Computing Science and Engineering, VIT University, Tamil Nadu, India. ABSTRACT Computer security is one of the key areas where lot of research is being done. Many intrusion detection techniques are proposed to ensure the network security, protect network resources and network infrastructures. Intrusion detection systems (IDS) attempt to detect attacks by gathering network data and analyze the information from various areas to identify the possible intrusions. This paper proposes a defense mechanism combining three approaches such as anomaly, misuse and decision making model to produce better detection accuracy and a decreased false positive rate. The defense mechanism can be built to detect the attacks in credit card system using Hidden Markov approach in the anomaly detection module. The credit card holder’s behaviours are taken as attributes and t...
Read more

DYNAMIC VALIDITY PERIOD CALCULATION OF DIGITAL CERTIFICATES BASED ON AGGREGATED SECURITY ASSESSMENT

Image
DYNAMIC VALIDITY PERIOD CALCULATION OF DIGITAL CERTIFICATES BASED ON AGGREGATED SECURITY ASSESSMENT  Alexander Beck, Jens Graupmann, Frank Ortmeier Computer Systems in Engineering, Otto-von-Guericke-University, Magdeburg, Germany  ABSTRACT  The paper proposes a method based on different security-related factors to dynamically calculate the validity period of digital certificates. Currently validity periods are most often defined statically without scientific justification. This approach is not sufficient to objectively consider the actual need for security. Therefore the approach proposed in this paper considers relevant security criteria in order to calculate a meaningful validity period for digital certificates. This kind of security assessment can be executed periodically in order to dynamically respond to changing conditions. Especially in the context of complex systems and infrastructures that have an increased need for security, privacy and availab...
Read more