PROJECT TITLE:

Authenticated Key Exchange Protocols for Parallel Network File Systems - 2015

ABSTRACT:

We tend to study the matter of key institution for secure several-to-many communications. The problem is inspired by the proliferation of huge-scale distributed file systems supporting parallel access to multiple storage devices. Our work focuses on this Internet standard for such file systems, i.e., parallel Network File System (pNFS), that makes use of Kerberos to ascertain parallel session keys between shoppers and storage devices. Our review of the present Kerberos-based mostly protocol shows that it has a range of limitations: (i) a metadata server facilitating key exchange between the clients and also the storage devices has heavy workload that restricts the scalability of the protocol; (ii) the protocol will not give forward secrecy; (iii) the metadata server generates itself all the session keys that are used between the shoppers and storage devices, and this inherently results in key escrow. During this paper, we have a tendency to propose a variety of authenticated key exchange protocols that are designed to address the higher than issues. We have a tendency to show that our protocols are capable of reducing up to approximately fifty four percent of the workload of the metadata server and concurrently supporting forward secrecy and escrow-freeness. All this requires only a small fraction of increased computation overhead at the client.