NDLI: KEAML - Key Exchange and Authentication Markup Language

Content Provider	IEEE Xplore Digital Library
Author	Xuebing Qing Adams, C.
Copyright Year	2006
Description	Author affiliation: SITE, Ottawa Univ., Ont. (Xuebing Qing; Adams, C.)
Abstract	It is not uncommon that an enterprise application-level business entity in one security domain needs to be engaged in protected information exchanges across unsecured public networks with a number of other entities from separate security domains in an ad-hoc fashion. Neither having a trusted central authority to manage this activity nor a proprietary security handshake protocol designed for particular applications works; the former is often impractical while the latter lacks interoperability and typically cannot be massively deployed. Experience has also shown that proprietary protocols are usually very weak and vulnerable to a variety of attacks. It is desirable to have a standardized protocol for mutual key exchange and authentication that is resistant to a variety of attacks, scalable, and sufficiently flexible to be deployed in a number of different application environments. Unfortunately, no such standard has been developed for enterprise-level applications and services. This paper defines an XML-based key exchange and authentication framework along with a protocol, with concepts such as two-phase negotiation, standardized key exchange templates that resist attack, and public components for Diffie-Hellman exchange borrowed from ISAKMP/IKE (the layer 3 security framework and protocol for VPN). The proposed protocol also leverages the W3C XML encryption and XML signature specifications to allow field-level encryption and signing of KEAML protocol messages, where required
Starting Page	634
Ending Page	638
File Size	259472
Page Count	5
File Format	PDF
ISBN	1424400384
DOI	10.1109/CCECE.2006.277583
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2006-05-07
Publisher Place	Canada
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Authentication Markup languages Protocols Information security XML Cryptography Protection Standards development Resists Virtual private networks Key exchange and authentication KEAML/KEAML-KE standard security handshake protocol
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A New Authentication and Key Exchange Protocol for Insecure Networks

Improved Client-to-Client Password-Authenticated Key Exchange Protocol

Security architecture for aeronautical networks

Efficient and Secure Password-based Authenticated Key Exchange Protocol

Improved TLS Handshake Protocols Using Identity-Based Cryptography

A CSK based SSL handshake protocol

Authenticated key agreement protocol for virtual private network based on certificateless cryptography

Cryptanalysis of a Password-based Key Exchange Protocol

A Four-Party Password-Based Authentication Key Exchange Protocol

KEAML - Key Exchange and Authentication Markup Language

Similar Documents

A New Authentication and Key Exchange Protocol for Insecure Networks

Improved Client-to-Client Password-Authenticated Key Exchange Protocol

Security architecture for aeronautical networks

Efficient and Secure Password-based Authenticated Key Exchange Protocol

Improved TLS Handshake Protocols Using Identity-Based Cryptography

A CSK based SSL handshake protocol

Authenticated key agreement protocol for virtual private network based on certificateless cryptography

Cryptanalysis of a Password-based Key Exchange Protocol

A Four-Party Password-Based Authentication Key Exchange Protocol

KEAML - Key Exchange and Authentication Markup Language