Authentication system for stateless RESTful Web service

Issue title: Selected papers from the ISCA International Conference on Software Engineering and Data Engineering, and the ISCA International Conference on Computer Applications in Industry and Engineering, 2015, and Invited Papers

Guest editors: Takaaki Goto and Narayan C. Debnath

Article type: Research Article

Authors: Lee, Sungchul^* | Jo, Ju-Yeon | Kim, Yoohwan

Affiliations: Department of Computer Science, University of Nevada Las Vegas, Las Vegas, NV 89154, USA

Correspondence: [*] Corresponding author: Sungchul Lee, Department of Computer Science, University of Nevada Las Vegas, Las Vegas, NV, USA. E-mail:lees173@unlv.nevada.edu

Abstract: REST protocol is a commonly used Web-based communication interface in various areas (e.g., Web service, IoT devices). Current REST protocol faces several challenges to solve the authentication system. This paper describes an ID-based authentication algorithm using Boneh-Franklin ID-based encryption to achieve a secure and stateless RESTful Web service. This ID-based authentication process allows a server to handle client requests by acknowledging the client's URI rather than storing client's state, thereby simplifying the process. This paper discusses the shortcomings of current authentication mechanisms, the concept of ID-based encryption (IBE), and the process of stateless secure REST protocol.

Keywords: ID-based encryption, RESTful Web service, ID-based authentication, REST

DOI: 10.3233/JCM-160677

Journal: Journal of Computational Methods in Sciences and Engineering, vol. 17, no. S1, pp. S21-S34, 2017