Separating Key Management From File System Security (1999)
| Venue: | In Proc. SOSP |
| Citations: | 9 - 5 self |
BibTeX
@INPROCEEDINGS{Eres99separatingkey,
author = {David Mazi Eres and Michael Kaminsky and M. Frans Kaashoek and Emmett Witchel},
title = {Separating Key Management From File System Security},
booktitle = {In Proc. SOSP},
year = {1999},
pages = {124--139}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
No secure network file system has ever grown to span the Internet. Existing systems all lack adequate key management for security at a global scale. Given the diversity of the Internet, any particular mechanism a file system employs to manage keys will fail to support many types of use. We propose separating key management from file system security, letting the world share a single global file system no matter how individuals manage keys. We present SFS, a secure file system that avoids internal key management. While other file systems need key management to map file names to encryption keys, SFS file names effectively contain public keys, making them self-certifying pathnames. Key management in SFS occurs outside of the file system, in whatever procedure users choose to generate file names. Self-certifying pathnames free SFS clients from any notion of administrative realm, making inter-realm file sharing trivial. They let users authenticate servers through a number of different tech...
Citations
No citations identified.
