Credential Management and Secure Single Login for SPKM

The GSS-API [20, 21] offers security services independent of underlying mechanisms. A possible GSS-mechanism is the Simple Public Key Mechanism (SPKM) specified in [1]. In this paper we will focus on the credential management for SPKM. If more than one connection is needed, the standard credential management requires either to cache the secret keys in insecure storage or to make the user entering a password to access the long term secret keys for every new GSS-connection. For environments in which neither one is acceptable we propose a Secure Single Login (SSLogin) variant which works with temporary asymmetric keys and combines security and user comfort.

• Type: Conference
• Year: 1998
• Where: NDSS
• Authors: Detlef Hühnlein
• Keywords: Computer Networks, Credential Management, NDSS 1998, Secret Keys, Term Secret Keys