Providing basic security mechanisms in broker-less publish/subscribe systems

The provisioning of basic security mechanisms such as authentication and confidentiality is highly challenging in a content-based publish/subscribe system. Authentication of publishers and subscribers is difficult to achieve due to the loose coupling of publishers and subscribers. Similarly, confidentiality of events and subscriptions conflicts with contentbased routing. In particular, content-based approaches in broker-less environments do not address confidentiality at all. This paper presents a novel approach to provide confidentiality and authentication in a broker-less content-based publish-subscribe system. The authentication of publishers and subscribers as well as confidentiality of events is ensured, by adapting the pairing-based cryptography mechanisms, to the needs of a publish/subscribe system. Furthermore, an algorithm to cluster subscribers according to their subscriptions preserves a weak notion of subscription confidentiality. Our approach provides fine grained key man...

• Type: Conference
• Year: 2010
• Where: DEBS
• Authors: Muhammad Adnan Tariq, Boris Koldehofe, Ala' Altaweel, Kurt Rothermel
• Keywords: Authentication, Confidentiality, DEBS 2010, Distributed And Parallel Computing, Subscribers