Evaluating the Performance of Novel JWT Revocation Strategy
| Autor: | Peter Ekler, János Levendovszky, László Viktor Jánoky |
|---|---|
| Rok vydání: | 2021 |
| Předmět: |
Information Systems and Management
Revocation Computer science Computer Science (miscellaneous) Computer Vision and Pattern Recognition Electrical and Electronic Engineering Management Science and Operations Research Computer security computer.software_genre computer Software Theoretical Computer Science |
| Zdroj: | Acta Cybernetica. 25:307-318 |
| ISSN: | 2676-993X 0324-721X |
| DOI: | 10.14232/actacyb.289455 |
| Popis: | JSON Web Tokens (JWT) provide a scalable, distributed way of user access control for modern web-based systems. The main advantage of the scheme is that the tokens are valid by themselves – through the use of digital signing – also imply its greatest weakness. Once issued, there is no trivial way to revoke a JWT token. In our work, we present a novel approach for this revocation problem, overcoming some of the problems of currently used solutions. To compare our solution to the established solutions, we also introduce the mathematical framework of comparison, which we ultimately test using real-world measurements. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|