PROJECT TITLE :

Ladon1 : end-to-end authorisation support for resource-deprived environments

ABSTRACT :

The authors gift Ladon, an enhanced version of Kerberos which extends the first protocol with authorisation capacity and relaxes the necessity of clock synchronisation by adding to the protocol special limited-lifetime nonces. This method, although all entities need timers, only the clocks of the 2 servers that constitute the key distribution centre must be synchronised with every alternative. The design of this protocol is motivated by the emergence of a replacement trend of applications in which sensors and low-capability devices become tiny info or application servers directly addressable by any Net-connected entity. Despite the massive potential of these environments, security is most likely the greatest barrier to their long-term success. To deal with this issue, Ladon allows for finish-to-end combine-wise key establishment in an authenticated and authorised manner, while keeping the introduced storage, computational and Communication overhead very low. The protection analysis with the AVISPA formal validation tool shows that the protocol meets the stated security goals, whereas the performance analysis shows that the overhead of the protocol is bounded and corresponding to that of other security protocols which give even less functionalities.