Authentication and Authorization Method Based on McEliece Crypto-Code Construction
In today's digital world and constant information exchange, data and resource security is of utmost importance. Authentication and authorization are key aspects of this security. These processes play a critical role in protecting systems and information from unauthorized access, ensuring reliability and trust in both personal and professional spheres. Together, authentication and authorization create a reliable barrier to protecting data and resources, playing a key role in information security. They help organizations comply with regulatory requirements, maintain the data confidentiality, availability and integrity, and prevent financial and reputational losses. The article suggests employing a Challenge-response authentication (CRA) technique that relies on post-quantum cryptosystems. The suggested authentication approach, utilizing McEliece crypto-code constructions (CCC), takes into account the secrecy level of information transmitted through wireless channels or stored in databases within socio-cyber-physical systems. The article uses approach of CRA, which is an authentication method in which the system asks a question (challenge) and the user must provide the correct answer (response). This method increases the level of security compared to simply entering a password, as it requires confirming the user's identity using unique data generated based on the challenge. The suggested approach for exchanging information via wireless communication channels guarantees practical implementation on devices with limited resources (CCC in the field <tex xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">$GF(2^{4})$</tex>).
Authors
- Stanislav Milevskyi (ORCID: https://orcid.org/0000-0001-5087-7036)
- Roman Korolov (ORCID: https://orcid.org/0000-0002-7948-5914)
- Sergii Dunaiev (ORCID: https://orcid.org/0000-0001-8736-3602)
- Leonid Shcherbyna (ORCID: https://orcid.org/0000-0002-1607-8174)
- Vadym Stetsenko (ORCID: https://orcid.org/0009-0008-5315-5539)
- Yana Lutsenko (ORCID: https://orcid.org/0000-0001-9780-4387)
Institutions
- Security Service of Ukraine (UA)
- National Technical University "Kharkiv Polytechnic Institute" (UA)
Publication Details
- Published
- 2024-11-07
- DOI
- https://doi.org/10.1109/ismsit63511.2024.10757296
- Primary Topic
- Access Control and Trust
- Type
- article
- Field-Weighted Citation Impact
- 0.00