Dae-Ha Park

A service bundle authentication mechanism in the OSGi service platform

The services in the OSGi framework environment are deployed dynamically according to the service gateway and the life-cycle of a service bundle. Services also have interactions with other services. In this paper, we propose a bundle authentication mechanism considering characteristics for the home gateway environment. We design the key exchange mechanism for exchanging a key and propose the service bundle authentication mechanism based on MAC that use a shared secret created in the bootstrapping step. Service bundle authentication mechanism we propose is more efficient than PKI-based bundle authentication mechanism or RSH protocol in the service platform, which has restricted resources such as storage space and operations.

A MAC-Based Service Bundle Authentication Mechanism in the OSGi Service Platform

In this paper, we propose a service bundle authentication mechanism considering characteristics for the home gateway environment. We designed the key exchange mechanism for exchanging a key, which transports a service bundle safely in bootstrapping step that recognizes and initializes various equipments. And we propose the service bundle authentication mechanism based on MAC that use a shared secret created in the bootstrapping step. A MAC-based service bundle authentication mechanism we propose is more efficient than PKI-based service bundle authentication mechanism or RSH protocol in the OSGi service platform, which has restricted resources such as storage space and operations

A user authentication model for the OSGi service platform

In this paper, we propose a new user authentication model for the OSGi service platform environment. The authentication model is extended from Kerberos. Since a user can use an authentication ticket repeatedly, the concept of SSO (Single-Sign on) is supported. With a login service for all bundle services in a gateway, the convenience that service providers do not need to develop proprietary authentication modules can be provided. In addition, using symmetric-key cryptosystem helps gateways to use their limited resources efficiently during user authentication tasks.