A New Design Of Self Proxy Signatures

With the ever increasing surge of digital communications and transactions, a tougher level of security is essential in order to safeguard the user and their data transactions. Systems, personal computers, mobile phones, servers, and even smart cards are all being used everywhere and there is a need to secure communications. With the influx of data management, there is a clear race between the two challengers in the game known as Information Security between developers and the hackers. PKI was designed to influence the Internet infrastructure for means of communication (Samuelle, 2011). While decreasing antagonistic misuse of data, reducing data theft, and providing an extra layer of trust through key pairs and

Compromised Certificates – stealing certificates to sign malware, encrypt outbound sessions to avoid detection, and Man-in-the-Middle attacks to decrypt sensitive data.

PKI supports the distribution and identification of public encryption keys, enabling users and computers to both securely exchange data over networks and verifies the identity of the other party. It enhances the security of data by

Public key infrastructures (PKIs) are necessary to help ascertain the identity of different people, devices, and services. In a nutshell, PKIs go way beyond the use of user IDs and passwords, employing cryptographic technologies such as digital signatures and digital certificates to create unique credentials that can be validated beyond reasonable doubt and on a mass scale ("What is pki?" n.d., p. 1).

There are many aspects to security and applications, from secure commerce and payment to private communications and protecting passwords. Cryptography, is the practice and study in securing communication between parties in the presence of potential adversaries (Yousuf, N.D.). This report focuses on modern methods of cryptography its operation, strengths and weaknesses, its application techniques in computing and some other aspects where cryptography deemed essential as discussed in this report.

While various security practices are in place that businesses can utilize, Public Key Infrastructure (PKI) has become a vital security foundation for Identity and management across the organizations. PKI empowers individuals and organizations to use various secure Internet applications. For instance, secure and lawfully restricting

Most users have multiple accounts in various Service Providers with different usernames and passwords which in turn leads to lost productivity and apply more overhead on administrators. So, there is a need to use the SSO technique in which an authorized user uses only a single action of authentication to access all related systems or applications of same trust domain [34]. In cloud based SSO system the central authentication server hides a multiplicity of user’s account information into a single account to be sent to the needed server of the system or application whenever the user intends to use it [35]. The concept of SSO can be deployed within an Intranet, Extranet or Internet using Token or PKI-based SSO protocols for single credentials or set of other protocols for multiple credentials as declared in the following Figure:

RSA cryptography is vastly used to encrypt and decrypt message while communicating through internet and in the field of digital signature. This encryption system is used regularly in web browsers, chat applications email, vpn and any other types of communications that require securely sending data to severs or the other people.[8] RSA cryptography is an asymmetrical cryptography system. Because it have two keys. One is public another is private. The encryption key is public while the decryption key is private. So only the person with the correct decryption key can decipher the encrypted message. Everyone have their own encryption and decryption keys. The keys must be made in such a way that the decryption key may not easily

While doing the survey of the various security models, privacy mechanisms and other kind of security model which deals with the security and privacy of users who are part of information being shared, we have came across few really nice and promising models. In this section, we are summarizing these methods one by one: -

In today’s digital age, the Internet has become an integral part of life. From emailing and instant messaging to banking and submitting tax, nearly every aspect of our life revolves around the cyber world. While the Internet had provided us with great accessibility and convenience over the years, it also exposes us to cyberthreats. All sensitive information such as passwords and personal financial details sent using the internet are subjected to cyber threats to a certain extend []. When stolen, such information can be used against us, affect user’s life. Therefore it is crucial to understand how to protect information from exploitations.

Sometimes, people want to keep their information as authentic and secure as possible. This calls for the use of a few protocols that makes this a success. To achieve it, one can either make use of the AH or even ESP. research shows that the two can be used together or even separately. This essay will focus on the functionality of AH and ESP, their main activities and their advantages over each other.

Identity based encryption is an energizing distinct option for open key encryption, which takes out the requirement for a Public Key Infrastructure (PKI) that makes freely accessible the mapping between characters, public keys, and legitimacy of the latter. The senders utilizing an IBE don 't have to look up in public keys and the relating declarations of the collectors, in light of the fact that the personalities e.g. messages or IP addresses together with regular open parameters are adequate for encryption. The private keys of the users are given by a trustee outsider called the private key generator (PKG).

Abstract: Authentication is the mechanism through which user or an individual will ensure his identity claiming that it is true to the server. Information assurance(IA) is one of the vital aspects of network security where authentication is one of the five pillars of the IA. The advent of authentication led to various protocols which have their respective pros and cons. One such protocols is Zero Knowledge Proof Authentication which is a cryptographic model that does not reveal the user’s actual credentials but proves that the user possesses the true credentials without revealing any original information. This paper presents the idea of way Zero Knowledge proof (ZKP) protocol is implemented in authentication and other cryptographic operations using different mechanisms.

In this paper we will present you a brief summary of recent attacks on Elliptic Curve Cryptography and countermeasure of these attacks. We will introduce only attacks which have been either performed practically or there is proof of concept of these attacks. We will not introduce any new attack on Elliptic Curve Cryptography. There is no perfect countermeasure against these attacks.

These days, when e-mail has become the main means of personal and business communication and stealing information is what trade secret crimes thrive on the problems of securing email and safeguarding privacy are on everyone’s mind.