[CS-TR] Dartmouth Technical Report TR2004-525

[Educational CyberPlayGround <admin@xxxxxxxxxxxxxxx>]

**************************************************************
-- Educational CyberPlayGround Community 
http://www.edu-cyberpg.com/

-- Network Newsletters Mailing List ©1994
-- Subscribe - Unsubscribe - Email Preferences
http://www.edu-cyberpg.com/Community/NetworkNewsletters.html

-- Advertise on Network Newsletters Mailing List
http://www.edu-cyberpg.com/Community/Subguidelines.html

-- Mailing Lists
http://www.edu-cyberpg.com/Community/index.html
**************************************************************

*********************************************************************
THE HOTLIST IS A MASTER REGISTRY OF K-12 SCHOOLS
The registry is organized by state and by grade level.
The registry also includes sites for charter Schools, virtual schools,
school districts, state and regional education organizations, state
departments of education, state standards and state administrators.
REGISTER YOUR SCHOOL NOW:
http://www.edu-cyberpg.com/Schools/default.asp


Date:         Mon, 29 Nov 2004 13:53:15 -0500
Subject: [CS-TR] Dartmouth Technical Report TR2004-525

The Department of Computer Science at Dartmouth College
announces a new technical report:

Secure Hardware Enhanced MyProxy

Dartmouth Technical Report TR2004-525

         John Marchesini
         Sean W. Smith

Date: November 2004


Abstract:
  In 1976, Whitfield Diffie and Martin Hellman demonstrated how "New
  Directions In Cryptography" could enable secure information exchange
  between parties that do not share secrets.

*********************************************************************
INTERNET PIONEERS
http://www.edu-cyberpg.com/IEC/pioneersPaul.html
*********************************************************************
In order for public key
  cryptography to work in modern distributed environments, we need an
  infrastructure for finding and trusting other parties' public keys
  (i.e., a PKI).  A number of useful applications become possible with
  PKI.  While the applications differ in how they use keys (e.g., S/MIME
  uses the key for message encryption and signing, while client-side SSL
  uses the key for authentication), all applications share one
  assumption: users have keypairs.
    In previous work, we examined the security aspects of some of the
  standard keystores and the their interaction with the OS.  We
  concluded that desktops are not safe places to store private keys, and
  we demonstrated the permeability of keystores such as the default
  Microsoft keystore and the Mozilla keystore.  In addition to being
  unsafe, these desktop keystores have the added disadvantage of being
  immobile.
    In other previous work, we examined trusted computing.  In industry, a
  new trusted computing initiative has emerged: the Trusted Computing
  Platform Alliance (TCPA) (now renamed the Trusted Computing Group
  (TCG)).  The goal of the TCG design is lower-assurance security that
  protects an entire desktop platform and is cheap enough to be
  commercially feasible.  Last year, we built a trusted computing
  platform based on the TCG specifications and hardware.
    The picture painted by these previous projects suggests that common
  desktops are not secure enough for use as PKI clients, and trusted
  computing can improve the security of client machines.  The question
  that I propose to investigate is: "Can I build a system which applies
  trusted computing hardware in a reasonable manner in order to make
  desktops usable for PKI?"  My design begins with the Grid community's
  "MyProxy" credential repository, and enhances it to take advantage of
  secure hardware on the clients, at the repository, and in the policy
  framework.  The result is called "Secure Hardware Enhanced MyProxy".

To obtain an electronic copy, point your web browser to the URL
    <http://www.cs.dartmouth.edu/reports/abstracts/TR2004-525/>.
Most reports are available in electronic format.
You can either download them directly or order them to be sent through email.

To order a paper copy, write to reports@xxxxxxxxxxxxxxxx or to
         Technical Report Librarian
         Department of Computer Science
         Dartmouth College
         6211 Sudikoff Laboratory
         Hanover, NH 03755-3510
         USA
Ask for technical report TR2004-525, and be sure to include your own
mailing address.

To unsubscribe from this mailing list,
or to adjust your subscription preferences, please visit
   <http://listserv.dartmouth.org/scripts/wa.exe?SUBED1=CS-TR>

<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>
The Educational CyberPlayGround
http://www.edu-cyberpg.com/

National Children's Folksong Repository
http://www.edu-cyberpg.com/Culdesac/Repository/NCFR.html

Hot List of Schools Online and
Net Happenings, K12 Newsletters, Network Newsletters
http://www.edu-cyberpg.com/Community/index.html

7 Hot Site Awards
New York Times, USA Today , MSNBC, Earthlink,
USA Today Best Bets For Educators, Macworld Top Fifty
<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>  


<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>
EDUCATIONAL CYBERPLAYGROUND 
http://www.edu-cyberpg.com

Net Happenings, K12 Newsletters, Network Newsletters
http://www.edu-cyberpg.com/Community/index.html

FREE EDUCATION VENDOR DIRECTORY LISTING
http://www.edu-cyberpg.com/Directory/default.asp

HOT LIST OF SCHOOLS ONLINE
http://www.edu-cyberpg.com/Schools/default.asp

Educational CyberPlayGround Services
http://www.edu-cyberpg.com/PS/Home_Products.html
<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>

Other related posts:

[CS-TR] Dartmouth Technical Report TR2004-525