Skip to main content
SpringerLink
Log in

The Design and Implementation of Improved Secure Cookies Based on Certificate

  • Conference paper
  • First Online:
Book cover Progress in Cryptology — INDOCRYPT 2002 (INDOCRYPT 2002)

Part of the book series: Lecture Notes in Computer Science ((LNCS,volume 2551))

Included in the following conference series:

Abstract

The HTTP does not support continuity for browser-server interaction between successive visits of a user due to a stateless feature. Cookies were invented to maintain continuity and state on the Web. Because cookies are transmitted in plain and contain text-character strings encoding relevant information about the user, the attacker can easily copy and modify them for his undue profit. In this paper, we design a secure cookies scheme based on public key certificate for solving these security weakness of typical web cookies. Our secure cookies scheme provides not only mutual authentication between client and server but also confidentiality and integrity of user information. Additionally, we implement our secure cookies scheme and compare it to the performance with SSL(Secure Socket Layer) protocol that is widely used for security of HTTP environment.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 39.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Joon S. Park and Ravi Sandhu, “Secure Cookies on the Web” IEEE Internet Computing, Volume: 4 Issue: 4, July-Aug. 2000

    Google Scholar 

  2. Scott Oaks, “Java Security, 2nd Edition”, O’Reilly. 2001

    Google Scholar 

  3. V. Khu-smith and C. J. Mitchell, “Enhancing the security of cookies”, in: K. Kim (ed.), Information Security and Cryptology-ICISC 2001-Proceedings of the 4th International Conference, Seoul, Korea, December 2001, Springer-Verlag (LNCS 2288), Berlin (2002), pp.132–145

    Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Department of Computer Science, Pukyong Nat’l Univ., 599-1, Daeyeon3-Dong, Nam-Gu, 608-737, Pusan, Republic of Korea

    Jong-Phil Yang

  2. Division of Electronic, Computer and Telecommunication Engineering, Pukyong Nat’l Univ., 599-1, Daeyeon3-Dong, Nam-Gu, 608-737, Pusan, Republic of Korea

    Kyung-Hyune Rhee

Authors
  1. Jong-Phil Yang
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Kyung-Hyune Rhee
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. Department of Combinatorics and Optimization, University of Waterloo, N2L 3G1, Waterloo, Ontario, Canada

    Alfred Menezes

  2. Applied Statistics Unit, Indian Statistical Institute, 203, B.T. Road, 700108, Kolkata, India

    Palash Sarkar

Rights and permissions

Reprints and permissions

Copyright information

© 2002 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Yang, JP., Rhee, KH. (2002). The Design and Implementation of Improved Secure Cookies Based on Certificate. In: Menezes, A., Sarkar, P. (eds) Progress in Cryptology — INDOCRYPT 2002. INDOCRYPT 2002. Lecture Notes in Computer Science, vol 2551. Springer, Berlin, Heidelberg. https://doi.org/10.1007/3-540-36231-2_25

Download citation

  • DOI: https://doi.org/10.1007/3-540-36231-2_25

  • Published:

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-00263-5

  • Online ISBN: 978-3-540-36231-9

  • eBook Packages: Springer Book Archive

Publish with us

Policies and ethics

Search

Navigation