Attribute based User Authentication for Contents Distribution Environments

다국어 초록 (Multilingual Abstract)

In digital contents distribution environments, a user authentication is an important security primitive to allow only authenticated user to use right services by checking the validity of membership. For example, in Internet Protocol Television (IPTV) environments, it is required to provide an access control according to the policy of content provider. Remote user authentication and key agreement scheme is used to validate the contents accessibility of a user. We propose a novel user authentication scheme using smart cards providing a secure access to multimedia contents service. Each user is authenticated using a subset of attributes which are issued in the registration phase without revealing individual’s identity. Our scheme provides the anonymous authentication and the various permissions according to the combination of attributes which are assigned to each user. In spite of more functionality, the result of performance analysis shows that the computation and communication cost is very low. Using this scheme, the security of contents distribution environments in the client-server model can be significantly improved.

참고문헌 (Reference)

1 "http://www.itu.int/ITU-T/IPTV/"

2 R.S. Pippal, "Secure Key Exchange Scheme for IPTV Broadcasting" 36 (36): 47-52, 2012

3 T. Jiang, "Secure Communication between set-top-box and smart card in DTV broadcasting" 50 (50): 882-886, 2004

4 W. Diffie, "New Directions in Cryptography" 6 (6): 644-654, 1976

5 E.J. Yoon, "Improving the Dynamic IDBased Remote Mutual Authentication Scheme" LNCS 4277 : 499-507, 2006

6 A. Sahai, "Fuzzy identity based encryption" 2005

7 M. Pirretti, "Attribute-Based Systems" 2006

8 K. Frikken, "Attribute-Based Access Control with Hidden Policies and Hidden Credentials" 55 (55): 1259-1270, 2006

9 M. S. Hwang, "A new remote user authentication scheme using smart cards" 46 (46): 28-30, 2000

10 M. L. Das, "A dynamic IDbased remote user authentication scheme" 6 (6): 629-631, 2004

11 H. Y. Chien, "A Remote Authentication Scheme Preserving User Anonymity" 2005