Cryptographic Key Management Schemes Research Articles

DECENT: Decentralized and Efficient Key Management to Secure Communication in Dense and Dynamic Environments

Intelligent Transportation Systems (ITS), one aspect of the Smart City paradigm, aim to improve the efficiency, convenience, and safety of travelers. The integration of (vehicular) communication technologies allows communication between the on-board communication units (OBUs) of vehicles, roadside units (RSUs), and vulnerable road users (VRUs), and contribute to the efficacy of ITS applications. However, these additional sources of information must be reliable and accurate. Security primitives such as confidentiality, integrity, and authenticity are required, but only achievable when supported with a suitable cryptographic key management scheme. This paper presents the design of a decentralized and efficient key management scheme, abbreviated as the DECENT scheme. This scheme provides secure multi-hop communication in dense and dynamic network environments while functioning in a self-organized manner. Through threshold secret sharing techniques, network nodes act as a distributed trusted third party (TTP) such that a threshold number of nodes can collaborate to execute key management functions. These functions include decentralized node admission and key updating. Novelties include (i) the unique self-healing characteristic, meaning that DECENT is capable of independently recovering from network compromise, and (ii) guidelines for choosing an appropriate security threshold in any deployment scenario which maximizes the level of security while simultaneously guaranteeing that decentralized key management services can be provided.

Augmenting security for electronic patient health record (ePHR) monitoring system using cryptographic key management schemes

Augmenting security for electronic patient health record (ePHR) monitoring system using cryptographic key management schemes

Simple Cryptographic Key Management Scheme of the Electronic Control Unit in the Lifecycle of a Vehicle

Simple Cryptographic Key Management Scheme of the Electronic Control Unit in the Lifecycle of a Vehicle

Augmenting security for electronic patient health record (ePHR) monitoring system using cryptographic key management schemes

Security plays a major role in most of the fields including pharmaceutical field. Authorization and Authentication are the key concepts in supporting notable areas of the cyber-health world. HIPAA's (Health Insurance Portability and Accountability Act) ultimate focus is to preserve the privacy of the health records of an individual without disclosing it and preventing the data from unauthorized access. A complaint key management solution is applied over the patient's health records to reduce the risk factor while engaging with cryptographic mechanisms. Though there are many existing cryptographic algorithms such as Elliptic curve cryptography, Elgammal's key exchange algorithm which provides security to the access of patient's health records, the proposed key management solution will overlay the same variant of security to the Electronic Health Records (EHR). This paper provides the countermeasures for improving security and suggests a key recovery mechanism for the protection of keys used in the security mechanism.

Cryptographic key management scheme for supporting multi-user SQL queries over encrypted databases

Database outsourcing is getting more popular bringing in a new standard, called database-as-a-service, where an organisation's database is stored in cloud. In such a setting, both access control and data confidentiality plays an important role, particularly when a data owner likes to publish his data for external use. Any cloud provider promises the security of its platform, while the execution of solutions to ensure confidentiality of the data stored in cloud databases is left to the data owner. The state-of-the-art solutions deal few preliminary issues with aid of SQL queries on encrypted data. In this paper, we propose a novel cryptographic key management scheme that combines data encryption and key management and supports multi-user SQL queries over encrypted databases. Our approach shows the proposed solutions for enforcing access control and for ensuring confidentiality of data. The experimental results obtained in this paper show the performance of proposed scheme.

Cryptographic key management scheme for supporting multi-user SQL queries over encrypted databases

Cryptographic key management scheme for supporting multi-user SQL queries over encrypted databases

Secure SCADA communication by using a modified key management scheme

This paper presents and evaluates a new cryptographic key management scheme which increases the efficiency and security of the Supervisory Control And Data Acquisition (SCADA) communication. In the proposed key management scheme, two key update phases are used: session key update and master key update. In the session key update phase, session keys are generated in the master station. In the master key update phase, the Elliptic Curve Diffie–Hellman (ECDH) protocol is used. The Poisson process is also used to model the Security Index (SI) and Quality of Service (QoS). Our analysis shows that the proposed key management not only supports the required speed in the MODBUS implementation but also has several advantages compared to other key management schemes for secure communication in SCADA networks.

ESA/390 Integrated Cryptographic Facility: An overview

This paper reviews the objectives of the Enterprise Systems Architecture/390™ (ESA/390™) Integrated Cryptographic Facility. It presents the cryptographic key-management scheme, summarizes key elements and unique characteristics of the facility, and describes the physical security provided by the first ESA/390 implementation.

A key-management scheme based on control vectors

This paper presents a cryptographic key-management scheme based on control vectors. This is a new concept that permits cryptographic keys belonging to a cryptographic system to be easily, securely, and efficiently controlled. The new key-management scheme—built on the cryptographic architecture and key management implemented in a prior set of IBM cryptographic products—has been implemented in the newly announced IBM Transaction Security System.

A cryptographic key management scheme for implementing the Data Encryption Standard

A key management protocol has been described that will allow the Data Encryption Standard (DES) to be integrated into electronic data processing systems for the purpose of obtaining communication security and file security. Several cryptographic keys have been defined that allow the desired key management protocol to be achieved. They are: • Host master key (KMO) • First variant of the host master key (KM1) • Second variant of the host master key (KM2) • Terminal master key (KMT) • Secondary communication key (KNC) • Secondary file key (KNF) • Primary communication key, or session key (KS) • Primary file key, or file key (KF).