SUPER PEER BASED PEER-TO-PEER NETWORK SYSTEM AND PEER AUTHENTICATION METHOD THEREOF

• US 20090158394A1
• Filed: 08/14/2008
• Published: 06/18/2009
• Est. Priority Date: 12/18/2007
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: OH, Byeong-Thaek, Lee, Sang-Bong, Park, Ho-Jin
• Application Number:
  US12/191,736
• Publication Number:
  US 20090158394A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/1046 Joining mechanisms
• CPC Class Codes: H04L 67/1048 Departure or maintenance mechanisms
• CPC Class Codes: H04L 67/1093 Some peer nodes performing special functions

Abstract

Provided are a super peer based P2P network system and a peer authentication method thereof. The authentication method includes a first authentication process and a second authentication process. In the first authentication process, a user and a peer which want to use a P2P network are verified by submitting authentication information and a public key infrastructure (PKI) certificate, and receive the permission of connection. In the second authentication process, a user and a peer requesting the use of a specific service are authenticated by using an authentication ticket and a service access-permitted time is limited in order to reinforcing the security of the specific service, which is searched in the P2P network and provided by the peer. Accordingly, the service providers can verify users more securely and limit the service available time of each user with respect to a specific service provided by the peer by using the lifetime of the ticket.

Claims

1. A peer authentication method of a super peer based peer-to-peer network system, the peer authentication method comprising:

requesting, by a super peer, an authentication of a peer requesting a service to an authentication server;

verifying, by the authentication server, a user and a peer and registering the peer as a peer of the corresponding user;

issuing, by the authentication server, a session key that will be used by the peer;

adding, by the super peer, the peer to a connection-permitted peer list after the authentication succeeds; and

permitting, by the super peer, the connection, and transmitting the session key to the peer.

2. The peer authentication method of claim 1, wherein the requesting of the authentication comprises:

sending, by the peer, a connection request message to the super peer upon initial operation; and

checking, by the super peer, the connection-permitted peer list, notifying a successful authentication when the corresponding peer exists in the connection-permitted peer list, and receiving an authentication information message by requesting authentication information to the peer when the peer information does not exist in the connection-permitted peer list.

3. The peer authentication method of claim 2, wherein the authentication information message comprises a user ID, a time stamp, a digital signature generated by encrypting the user ID and the time stamp with a secret key, and a public key certificate (PKC).

4. The peer authentication method of claim 1, wherein the issuing of the session key comprises:

generating, by the authentication server, a one-time session key that will be used by the peer;

encrypting the one-time session key with a public key, and transmitting the encrypted one-time session key to the peer; and

obtaining, by the peer, a session key by decrypting the encrypted one-time session key with a secret key of the peer.

5. The authentication method of claim 1, further comprising deleting, by the super peer, the peer information from the connection-permitted peer list of the super peer when the peer logs out in order to finish the use of a peer-to-peer network.

6. A peer authentication method of a super peer based peer-to-peer network system, the peer authentication method comprising:

forming, by a peer, a virtual communication channel between the peer and other peer after the peer searches the other peer, and limiting the peer'"'"'s use of a specific service by checking a service access-permitted peer list when the peer requests the use of the specific service of the other peer;

receiving, by the peer, an authentication ticket by requesting an authentication ticket issue to the super peer upon a request of the other peer;

verifying, by the other peer, the issued authentication ticket and permitting the use of the specific service; and

reissuing, by the other peer, the authentication ticket for the service in order to limit an authentication ticket lifetime of each permitted user.

7. The peer authentication method of claim 6, wherein the limiting of the peer'"'"'s use of the specific service comprises:

requesting, by the peer, the use of the specific service to the other peer after the service search is completed;

checking, by the other peer, a service access-permitted user and peer list with respect to the peer; and

refusing, by the other peer, to provide the service when the peer does not exist in the service access-permitted user and peer list, and requesting an authentication ticket to the peer in order to provide the service when the peer exists in the service access-permitted user and peer list.

8. The peer authentication method of claim 6, wherein the issuing of the authentication ticket comprises:

checking, by the peer, an existence/non-existence and lifetime of the authentication ticket with respect to the requested service;

requesting the use of the service using the authentication ticket when the authentication ticket exists and the lifetime of the authentication ticket is available;

requesting the authentication ticket issue with respect to the service to the super peer when the authentication ticket does not exist or the authentication ticket lifetime is expired;

determining, by the super peer, whether the peer information exists in a connection-permitted peer list, requesting a user and peer authentication when the peer information does not exist in the connection-permitted peer list, and requesting the authentication ticket issue to the authentication server when the peer information exists in the connection-permitted peer list; and

generating, by the authentication server, the authentication ticket and transmitting the generated authentication ticket to the peer.

9. The peer authentication method of claim 6, wherein the permitting of the specific service comprises:

receiving, by the peer, the authentication ticket from the super peer and decrypting the received authentication ticket with a session key of the peer, and generating an authenticator to request the use of the specific service to the other peer through a virtual communication channel; and

rechecking, by the other peer, the service access-permitted user list and verifying a user and a peer by decrypting the authentication ticket and the authenticator.

10. The peer authentication method of claim 6, wherein the reissuing of the authentication ticket comprises:

permitting the use of the service by verifying a user and a peer; and

reissuing the authentication ticket having an adjusted lifetime limiting the service access available time for the service of the peer by the peer providing the service.

11. The peer authentication method of claim 10, further comprising requesting the use of the service using the reissued authentication ticket when the peer uses the same service.

12. A super peer based peer-to-peer network system, comprising:

at least one peer for requesting a service, providing authentication information input by a user, and forming a virtual communication channel between the peer and other peer;

at least super peer for checking a connection-permitted peer list, requesting an authentication of a peer that does not exist in the connection-permitted peer list, and adding an authenticated peer to the connection-permitted peer list; and

an authentication server for authenticating a peer and user requested by a super peer, generating a session key, and issuing an authentication ticket to the requested peer.

13. The super peer based peer-to-peer network system of claim 12, wherein the peer comprises:

an authentication ticket managing unit for managing an ID of an authentication ticket submitted by other peer, encrypting and decrypting the authentication ticket, and reissuing an authentication ticket by adjusting an authentication ticket lifetime;

a peer authenticating unit for encrypting and decrypting a message received from the super peer and the other peer using the session key, and controlling a peer authentication function;

a user/peer management database for managing a user permitted to use the service provided by the peer, and a peer ID of the corresponding user;

a service managing unit for managing IDs in each service provided by the peers, and notifying the IDs to a peer-to-peer network; and

a peer-to-peer communication unit for controlling a peer-to-peer communication with the super peer(s) and the other peer(s).

14. A peer authentication method of a super peer based peer-to-peer network system, the peer authentication method comprising:

performing a first authentication process to verify a peer requesting a service by using a certificate and to permit a connection; and

performing a second authentication process to authenticate a user and a peer requesting the use of a specific service, which is provided by a peer searched in a peer-to-peer network, by using an authentication ticket and to limit a service access-permitted time for the peer requesting the use of the service.

15. The peer authentication method of claim 14, wherein the first authentication process comprises:

requesting, by a super peer, an authentication of the peer, which is requesting the use of a specific service, to an authentication server;

verifying, by the authentication server, the user and the peer and registering the peer as a peer of the corresponding user;

issuing, by the authentication server, a session key that will be used by the peer;

adding, by the super peer, the peer to a connection-permitted peer list after the authentication succeeds; and

transmitting, by the super peer, the session key to the peer to permit the connection.

16. The peer authentication method of claim 14, wherein the second authentication process comprises:

forming, by the peer, a virtual communication channel between the peer and other peer after the peer searches the other peer, and limiting, by the other peer, the peer'"'"'s use of a specific service by checking a service access-permitted peer list when the peer requests the use of the specific service of the other peer;

receiving, by the peer, an authentication ticket by requesting an authentication ticket issue to the super peer upon a request of the other peer;

verifying, by the other peer, the issued authentication ticket and permitting the use of the specific service; and

reissuing the authentication ticket for the service in order to limit an authentication ticket lifetime of each permitted user.