Zt &t: secure service session management using blockchain-based tokens in zero trust networks.

IF 1.8 4区计算机科学 Q3 TELECOMMUNICATIONS

Annals of Telecommunications Pub Date : 2024-02-03 DOI:10.1007/s12243-023-01008-y

Javier Jose Diaz Rivera, Waleed Akbar, Talha Ahmed Khan, Afaq Muhammad, Wang-Cheol Song

{"title":"Zt &t: secure service session management using blockchain-based tokens in zero trust networks.","authors":"Javier Jose Diaz Rivera, Waleed Akbar, Talha Ahmed Khan, Afaq Muhammad, Wang-Cheol Song","doi":"10.1007/s12243-023-01008-y","DOIUrl":null,"url":null,"abstract":"<div><p>In today’s interconnected world, the line that separates the network perimeter can no longer be identified. This has led to the development of Zero Trust Networking (ZTN) and Software Defined Perimeter (SDP) concepts, which aim to extend the perimeter of trust to every entity connected to the network regardless of their physical location. However, implementing complex security mechanisms and constant trust assurance for every interaction can be challenging. One solution is integrating blockchain technology into Zero Trust to provide security. Blockchain offers features such as data decentralization, anonymity, cryptography, and immutable record of transactions that can be utilized. This work proposes a mechanism for secure service session management using blockchain capabilities. Non-fungible tokens (NFT) are applied to access and provider tokens representing a policy agreement for service consumption. These tokens are mapped to the public addresses of entities registered in the blockchain. The proposal is realized through an open-source Zero Trust platform and a private Ethereum blockchain.</p></div>","PeriodicalId":50761,"journal":{"name":"Annals of Telecommunications","volume":"79 7-8","pages":"487 - 505"},"PeriodicalIF":1.8000,"publicationDate":"2024-02-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Annals of Telecommunications","FirstCategoryId":"94","ListUrlMain":"https://link.springer.com/article/10.1007/s12243-023-01008-y","RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"TELECOMMUNICATIONS","Score":null,"Total":0}

引用次数: 0

Abstract

In today’s interconnected world, the line that separates the network perimeter can no longer be identified. This has led to the development of Zero Trust Networking (ZTN) and Software Defined Perimeter (SDP) concepts, which aim to extend the perimeter of trust to every entity connected to the network regardless of their physical location. However, implementing complex security mechanisms and constant trust assurance for every interaction can be challenging. One solution is integrating blockchain technology into Zero Trust to provide security. Blockchain offers features such as data decentralization, anonymity, cryptography, and immutable record of transactions that can be utilized. This work proposes a mechanism for secure service session management using blockchain capabilities. Non-fungible tokens (NFT) are applied to access and provider tokens representing a policy agreement for service consumption. These tokens are mapped to the public addresses of entities registered in the blockchain. The proposal is realized through an open-source Zero Trust platform and a private Ethereum blockchain.

Abstract Image

查看原文本刊更多论文

Zt &t：在零信任网络中使用基于区块链的代币进行安全服务会话管理。

在当今的互联世界中，网络边界的分界线已无法确定。因此，人们提出了零信任网络（ZTN）和软件定义边界（SDP）的概念，旨在将信任边界扩展到与网络连接的每个实体，无论其物理位置如何。然而，实施复杂的安全机制并为每次交互提供持续的信任保证可能具有挑战性。一种解决方案是将区块链技术整合到零信任中，以提供安全性。区块链具有数据去中心化、匿名、加密和不可更改的交易记录等特点，可以加以利用。这项工作提出了一种利用区块链功能进行安全服务会话管理的机制。不可篡改代币（NFT）适用于代表服务消费策略协议的访问和提供者代币。这些代币被映射到在区块链中注册的实体的公共地址。该提案通过开源零信任平台和私有以太坊区块链实现。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

Annals of Telecommunications 工程技术-电信学

CiteScore

5.20

自引率

5.30%

发文量

审稿时长

4.5 months

期刊介绍： Annals of Telecommunications is an international journal publishing original peer-reviewed papers in the field of telecommunications. It covers all the essential branches of modern telecommunications, ranging from digital communications to communication networks and the internet, to software, protocols and services, uses and economics. This large spectrum of topics accounts for the rapid convergence through telecommunications of the underlying technologies in computers, communications, content management towards the emergence of the information and knowledge society. As a consequence, the Journal provides a medium for exchanging research results and technological achievements accomplished by the European and international scientific community from academia and industry.