Identity-Based Cryptosystems for Enhanced Deployment of OSGi Bundles

Pierre Parrend (1) , Samuel Galice (1) , Stéphane Frénot (1, 2) , Stéphane Ubéda (1)

1 ARES - Architectures of networks of services
2 TC - Département Télécommunications Services & Usages

The OSGi platform is designed to make Java soft- ware extensible at runtime. This undeniably presents a great interest in several domains like embedded plat- forms or enterprise application servers. However, se- curing the deployment of the OSGi components, or bundles, proves to be a major challenge. The current approach consists in digitally signing the bundles and certifying the signature through a Public Key Infras- tructure. We propose to replace this technology with Identity- based cryptographic mechanisms, which provide both better performances and simplified key management. We present an infrastructure for initialization and use of Identity-based key management, and define the dig- ital signature of bundles using such a cryptographic scheme. Based on our implementation, we provide a comparison between PKI management and Identity- based Key Management. The proposed approach proves to support radical improvement in the key management process, especially in strongly asymmetric system such as OSGi-based Home Gateway, where a few providers publish services for millions of potential users.

Mots clés: Identity-Based Cryptography; Software Deployment; OSGi Platform

Domaines: Cryptographie et sécurité [cs.CR]; Informatique ubiquitaire; Réseaux et télécommunications [cs.NI]

Pierre Parrend, Samuel Galice, Stéphane Frénot, Stéphane Ubéda. Identity-Based Cryptosystems for Enhanced Deployment of OSGi Bundles. International Conference on Emerging Security Information, Systems and Technologies, IARIA Association, Oct 2007, Valencia, Spain. ⟨inria-00275178⟩