loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
21st Annual Computer Security Applications Conference (ACSAC'05)
Layering Public Key Distribution Over Secure DNS using Authenticated Delegation
Tucson, Arizona
December 05-December 09
ISBN: 0-7695-2461-3
John P. Jones, University of California, Riverside
Daniel F. Berger, University of California, Riverside
Chinya V. Ravishankar, University of California, Riverside
We present the Internet Key Service (IKS), a distributed architecture for authenticated distribution of public keys, layered on Secure DNS (DNSSEC). Clients use DNSSEC to securely discover the identities of the relevant IKS servers, and send key lookup or management requests directly to these servers using a special-purpose protocol. Clients authenticate keys retrieved from IKS servers using key commitments published in DNSSEC. IKS derives its authentication authority from the authority DNS domains have over Internet names. The IKS architecture is loosely coupled with DNS to minimize overhead on DNS servers. We also present RIKS, a prototype IKS implementation.
Citation:
John P. Jones, Daniel F. Berger, Chinya V. Ravishankar, "Layering Public Key Distribution Over Secure DNS using Authenticated Delegation," acsac, pp.409-418, 21st Annual Computer Security Applications Conference (ACSAC'05), 2005
Usage of this product signifies your acceptance of the Terms of Use.