Evaluating the performance of novel JWT revocation strategy
JSON Web Tokens (JWT) provide a scalable, distributed way of user access control for modern web-based systems. The main advantage of the scheme is that the tokens are valid by themselves – through the use of digital signing – also imply its greatest weakness. Once issued, there is no trivial way to...
Elmentve itt :
| Szerzők: | |
|---|---|
| Testületi szerző: | |
| Dokumentumtípus: | Cikk |
| Megjelent: |
University of Szeged, Institute of Informatics
Szeged
2021
|
| Sorozat: | Acta cybernetica
25 No. 2 |
| Kulcsszavak: | Programozás, Számítástechnika |
| Tárgyszavak: | |
| doi: | 10.14232/actacyb.289455 |
| Online Access: | http://acta.bibl.u-szeged.hu/75612 |
| Tartalmi kivonat: | JSON Web Tokens (JWT) provide a scalable, distributed way of user access control for modern web-based systems. The main advantage of the scheme is that the tokens are valid by themselves – through the use of digital signing – also imply its greatest weakness. Once issued, there is no trivial way to revoke a JWT token. In our work, we present a novel approach for this revocation problem, overcoming some of the problems of currently used solutions. To compare our solution to the established solutions, we also introduce the mathematical framework of comparison, which we ultimately test using real-world measurements. |
|---|---|
| Terjedelem/Fizikai jellemzők: | 307-318 |
| ISSN: | 0324-721X |