Identity-Based Cryptosystems for Enhanced Deployment of OSGi Bundles
Résumé
The OSGi platform is designed to make Java soft- ware extensible at runtime. This undeniably presents a great interest in several domains like embedded plat- forms or enterprise application servers. However, se- curing the deployment of the OSGi components, or bundles, proves to be a major challenge. The current approach consists in digitally signing the bundles and certifying the signature through a Public Key Infras- tructure. We propose to replace this technology with Identity- based cryptographic mechanisms, which provide both better performances and simplified key management. We present an infrastructure for initialization and use of Identity-based key management, and define the dig- ital signature of bundles using such a cryptographic scheme. Based on our implementation, we provide a comparison between PKI management and Identity- based Key Management. The proposed approach proves to support radical improvement in the key management process, especially in strongly asymmetric system such as OSGi-based Home Gateway, where a few providers publish services for millions of potential users.
Origine | Fichiers produits par l'(les) auteur(s) |
---|
Loading...