An authentication protocol based on chaos and zero knowledge proof
- 1. Edinburgh Napier University. Blockpass ID Lab (United Kingdom)
Description
Port Knocking is a method for authenticating clients through a closed stance firewall, and authorising their requested actions, enabling severs to offer services to authenticated clients, without opening ports on the firewall. Advances in port knocking have resulted in an increase in complexity in design, preventing port knocking solutions from realising their potential. This paper proposes a novel port knocking solution, named Crucible, which is a secure method of authentication, with high usability and features of stealth, allowing servers and services to remain hidden and protected. Crucible is a stateless solution, only requiring the client memorise a command, the server's IP and a chosen password. The solution is forwarded as a method for protecting servers against attacks ranging from port scans, to zero-day exploitation. To act as a random oracle for both client and server, cryptographic hashes were generated through chaotic systems.
Additional details
Identifiers
Publishing Information
- Journal Title
- Nonlinear Dynamics
- Journal Volume
- 99
- Journal Issue
- 4
- Journal Page Range
- p. 3065-3087
- ISSN
- 0924-090X
INIS
- Country of Publication
- Netherlands
- Country of Input or Organization
- International Atomic Energy Agency (IAEA)
- INIS RN
- 56006148
- Subject category
- S97: MATHEMATICAL METHODS AND COMPUTING;
- Descriptors DEI
- CHAOS THEORY; CONTROL THEORY; CRYPTOGRAPHY; DATA TRANSMISSION; DATA-FLOW PROCESSING; E-LEARNING; EXECUTIVE CODES; IDENTIFICATION SYSTEMS; LOCAL AREA NETWORKS; MATHEMATICAL SOLUTIONS; MEMORY MANAGEMENT; RANDOMNESS; RESOURCE EXPLOITATION; SECURITY
- Descriptors DEC
- COMMUNICATIONS; COMPUTER CODES; COMPUTER NETWORKS; DATA PROCESSING; EDUCATION; LEARNING; MATHEMATICS; PROCESSING; PROGRAMMING; TRAINING
Optional Information
- Copyright
- Copyright (c) 2020 © The Author(s) 2020