Problem
Research questions and friction points this paper is trying to address.
Quantum-Safe
Web Service Architecture
Time-Based One-Time Passwords
Post-Quantum Cryptography
Quantum-Safe Web Service Architecture Using Time-Based One-Time Passwords
🤖 AI Summary
本文探讨了基于后量子密码学的传输层安全管理和HMAC驱动的一次性时间密码，以构建抗量子的安全Web服务架构，并评估了几种哈希算法的计算性能。
📝 Abstract
One-Time Passwords (OTPs) have become a common option for multi-factor authentication in several applications. For instance, during website login processes, OTPs are often used in conjunction with traditional text-based usernames and passwords to verify whether the access request originates from a legitimate human user rather than an automated agent. However, in scenarios involving automated connections and system-to-system interoperability, Time-Based One-Time Passwords (TOTPs) may be required to establish secure connections and access Web Services (WSs). Therefore, this study focuses on exploring the development of a quantum-safe web service architecture. The proposed approach achieves transmission security management by implementing Transport Layer Security (TLS) and HyperText Transfer Protocol Secure (HTTPS) based on Post-Quantum Cryptography (PQC). Furthermore, web service security management is realized through the construction of keyed-Hash Message Authentication Code (HMAC)-driven TOTPs. Within the experimental environment, this study evaluates and compares the computational performance of the Secure Hash Algorithm-2 (SHA-2), SHA-3, Ascon-Hash256, and SM3. The required computation time under different hardware resource conditions is analyzed for future web service deployment.
Innovation
Methods, ideas, or system contributions that make the work stand out.
Post-Quantum Cryptography
Time-Based One-Time Passwords
Transport Layer Security
HyperText Transfer Protocol Secure
HMAC
🔎 Similar Papers
No similar papers found.
