Title :
A Batch-Authenticated and Key Agreement Framework for P2P-Based Online Social Networks
Author :
Yeh, Lo-Yao ; Huang, Yu-Lun ; Joseph, Anthony D. ; Shieh, Shiuhpyng Winston ; Tsaur, Woei-Jiunn
Author_Institution :
Network & Inf. Security Div., Nat. Center for High-Performance Comput., Hsinchu, Taiwan
fDate :
5/1/2012 12:00:00 AM
Abstract :
Online social networks (OSNs) such as Facebook and MySpace are flourishing because more and more people are using OSNs to share their interests with friends. Because security and privacy issues on OSNs are major concerns, we propose a security framework for simultaneously authenticating multiple users to improve the efficiency and security of peer-to-peer (P2P)-based OSNs. In the proposed framework, three batch authentication protocols are proposed, adopting the one-way hash function, ElGamal proxy encryption, and certificates as the underlying cryptosystems. The hash-based authentication protocol requires lower computational cost and is suitable for resource-limited devices. The proxy-based protocol is based on asymmetric encryption and can be used to exchange more information among users. The certificate-based protocol guarantees nonrepudiation of transactions by signatures. Without a centralized authentication server, the proposed framework can therefore facilitate the extension of an OSN with batched verifications. In this paper, we formally prove that the proposed batch authentication protocols are secure against both passive adversaries and impersonator attacks, can offer implicit key authentication, and require fewer messages to authenticate multiple users. We also show that our protocols can meet important security requirements, including mutual authentication, reputation, community authenticity, nonrepudiation, and flexibility. With these effective security features, our framework is appropriate for use in P2P-based OSNs.
Keywords :
computer network security; cryptographic protocols; data privacy; message authentication; peer-to-peer computing; social networking (online); ElGamal proxy encryption; Facebook; MySpace; P2P-based OSN; P2P-based online social networks; asymmetric encryption; batch authentication protocols; batch-authenticated agreement framework; batched verifications; centralized authentication server; certificate-based protocol; community authenticity; computational cost; cryptosystems; flexibility; hash-based authentication protocol; impersonator attacks; implicit key authentication; key agreement framework; multiple users; mutual authentication; nonrepudiation; one-way hash function; passive adversary; peer-to-peer-based OSN; privacy issues; proxy-based protocol; reputation; resource-limited devices; security features; security framework; security requirements; Authentication; Educational institutions; Encryption; Protocols; Social network services; Authentication protocol; Online social networks (OSNs); Peer to peer (P2P); batch authentication;
Journal_Title :
Vehicular Technology, IEEE Transactions on
DOI :
10.1109/TVT.2012.2188821