Key-Based Cookie-Less Session Management Framework for Application Layer Security

Zahoor Ahmed Alizai

doi:10.1109/ACCESS.2019.2940331

Key-Based Cookie-Less Session Management Framework for Application Layer Security

2019-01-01

7

OA

AI

Klaus D. McDonald-Maier

DOI：10.1109/ACCESS.2019.2940331

原文链接

查看原文

摘要

En 中文

The goal of this study is to extend the guarantees provided by the secure transmission protocols such as Secure Sockets Layer (SSL) or Transport Layer Security (TLS) and apply them to the application layer. This paper proposes a comprehensive scheme that allows the unification of multiple security mechanisms, thereby removing the burden of authentication, mutual authentication, continuous authentication, and session management from the application development life-cycle. The proposed scheme will allow creation of high-level security mechanisms such as access control and group authentication on top of the extended security provisions. This scheme effectively eliminates the need for session cookies, session tokens and any similar technique currently in use. Hence reducing the attack surface and nullifying a vast group of attack vectors.

Keyword:

Authentication

multi-factor authentication

password-less authentication

application layer security

session management

cookies

tokens

Key-Based Cookie-Less Session Management Framework for Application Layer Security

摘要

AI总结

期刊

机构