Design of an Efficient and Provable Secure Key Exchange Protocol for HTTP Cookies  

作　　者：Waseem Akram Khalid Mahmood Hafiz Burhan ul Haq Muhammad Asif Shehzad Ashraf Chaudhry Taeshik Shon 

机构地区：[1]Graduate School of Engineering Science and Technology,National Yunlin University of Science and Technology,Yunlin,64002,Taiwan,China [2]Future Technology Research Center,National Yunlin University of Science and Technology,Yunlin,64002,Taiwan,China [3]Department of Computer Science,Lahore Garrison University,Lahore,54920,Pakistan [4]Department of Computer Science and Information Technology,College of Engineering,Abu Dhabi University,Abu Dhabi,69911,United Arab Emirates [5]Department of Software Engineering,Faculty of Engineering and Architecture,Nisantasi University,Istanbul,34398,Turkey [6]Department of Cybersecurity,Ajou University,Suwon,16499,Republic of Korea

出　　处：《Computers, Materials & Continua》2024年第7期263-280,共18页计算机、材料和连续体（英文）

基　　金：support from Abu Dhabi University’s Office of Research and Sponsored Programs Grant Number:19300810.

摘　　要：Cookies are considered a fundamental means of web application services for authenticating various Hypertext Transfer Protocol(HTTP)requests andmaintains the states of clients’information over the Internet.HTTP cookies are exploited to carry client patterns observed by a website.These client patterns facilitate the particular client’s future visit to the corresponding website.However,security and privacy are the primary concerns owing to the value of information over public channels and the storage of client information on the browser.Several protocols have been introduced that maintain HTTP cookies,but many of those fail to achieve the required security,or require a lot of resource overheads.In this article,we have introduced a lightweight Elliptic Curve Cryptographic(ECC)based protocol for authenticating client and server transactions to maintain the privacy and security of HTTP cookies.Our proposed protocol uses a secret key embedded within a cookie.The proposed protocol ismore efficient and lightweight than related protocols because of its reduced computation,storage,and communication costs.Moreover,the analysis presented in this paper confirms that proposed protocol resists various known attacks.

关 键 词：COOKIES authentication protocol impersonation attack ECC 

分 类 号：TN918.4[电子电信—通信与信息系统]