.png){kind=icon}
返回
Safeguarding a formalized Blockchain-enabled identity-authentication protocol by applying security risk-oriented patterns
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2019.05.017.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Designing government independent and secure identification- and authentication protocols is a challenging task. Design flaws and missing specifications as well as security- and privacy issues of such protocols pose considerable user risks. Formal methods, such as Colored Petri Nets (CPN), are utilised for the design, development and analysis of such new protocols in order to detect flaws and mitigate identified security risks before deployment. This paper fills the gap, by applying in a novel way a set of security risk-oriented patterns (SRP) to the so-called Authcoin protocol that we formalise using CPN. The initial formal model of Authcoin facilitates the detection and elimination of design flaws, missing specifications as well as security- and privacy issues. The additional risk- and threat analysis based on the Information Systems Security Risk Management (ISSRM) domain model we perform on the formal CPN models of the protocol. The identified risks are mitigated by applying SRPs to the formal model of the Authcoin protocol. SRPs are a means to mitigate common security- and privacy risks in a business-process context by applying thoroughly tested and proven best-practice solutions. The goal of this work is to test the utility of SRPs outside of the the usual application domain, to reduce the risks and vulnerabilities of the Authcoin protocol. (C) 2019 Elsevier Ltd. All rights reserved.
Keyword:
Authcoin
Colored petri net
Authentication
Security
Patterns
Access control
Identity
Blockchain
Smart contract
Formal verification
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Cryptanalysis and Security Improvements of 'Two-Factor User Authentication in Wireless Sensor Networks'“无线传感器网络双因素用户认证” 的密码分析和安全性改进.png)
SENSORS
OAAI
SENSORSIF3.5
OAAI分享收藏
Security Enhanced User Authentication Protocol for Wireless Sensor Networks Using Elliptic Curves CryptographySENSORSOAAI
SENSORSIF3.5
OAAI分享收藏Advancing socio-technical systems thinking: A call for bravery推进社会技术系统思维: 勇敢的呼唤APPLIED ERGONOMICSOAAI
APPLIED ERGONOMICSIF3.4
OAAI分享收藏An extensible pattern-based library and taxonomy of security threats for distributed systems分布式系统安全威胁的可扩展的基于模式的库和分类
PREAI
分享收藏
查看更多内容