DNA-X

Authentication is a fundamental service for almost all computer networks. When the cryptographic key used for authentication is stolen, traditional authentication schemes would demand a new key to be issued and replace the stolen key for the authentication service to resume functioning. However, it is practically impossible to find out that a key is stolen and timely replace it, especially for large scale networks. In this paper, we propose a new authentication scheme, DNA-X, that can effectively defend against key theft attacks and automatically restore the authentication even if the key is stolen. DNA-X utilizes both the source and transmission randomness in network communications to constantly change the key and the Intel SGX mechanism for local credential protection. Security analysis and experiments show that DNA-X is a secure and efficient network authentication scheme.