In this paper, a new key management model called the authenticated on-line key renewal process is proposed which is very useful for almost all cryptographic applications those require the users to regularly update their keys or passwords to a remote machine. Protocol developments of the model and their cryptanalysis are given. Practical applications of the proposed model on two famous systems, the Kerberos authentication system and the S/KEY one-time password system, are introduced in this paper.
關聯:
第九屆全國資訊安全會議論文集=Proceedings of the Ninth National Conference on Infornation Security,頁316-323