An analysis on the revoking mechanisms for JSON Web Tokens

Janoky, Laszlo Viktor [Jánoky, László Viktor (Informatikai tudo...), szerző] Automatizálási és Alkalmazott Informatikai Tanszék (BME / VIK); Levendovszky, Janos [Levendovszky, János (Távközlési csator...), szerző] Hálózati Rendszerek és Szolgáltatások Tanszék (BME / VIK); Ekler, Peter [Ekler, Péter (Alkalmazott infor...), szerző] Automatizálási és Alkalmazott Informatikai Tanszék (BME / VIK)

Angol nyelvű Tudományos Szakcikk (Folyóiratcikk)
Megjelent: INTERNATIONAL JOURNAL OF DISTRIBUTED SENSOR NETWORKS 1550-1329 1550-1477 19 (9) Paper: 1550147718801535 , 10 p. 2018
  • SJR Scopus - Engineering (miscellaneous): Q2
JSON Web Tokens provide a scalable solution with significant performance benefits for user access control in decentralized, large-scale distributed systems. Such examples would entail cloud-based, micro-services styled systems or typical Internet of Things solutions. One of the obstacles still preventing the wide-spread use of JSON Web Token-based access control is the problem of invalidating the issued tokens upon clients leaving the system. Token invalidation presently takes a considerable processing overhead or a drastically increased architectural complexity. Solving this problem without losing the main benefits of JSON Web Tokens still remains an open challenge which will be addressed in the article. We are going to propose some solutions to implement low-complexity token revocations and compare their characteristics in different environments with the traditional solutions. The proposed solutions have the benefit of preserving the advantages of JSON Web Tokens, while also adhering to stronger security constraints and possessing a finely tuneable performance cost.
Hivatkozás stílusok: IEEEACMAPAChicagoHarvardCSLMásolásNyomtatás
2021-10-21 14:23