递归增强Fernet（RAF）令牌：缓解令牌被盗的痛点
Recursive Augmented Fernet (RAF) Token: Alleviating the Pain of Stolen Tokens
AI总结：
针对模块化系统的持票令牌被盗滥用问题，提出含一次性RAF令牌、黑名单和策略执行组件的认证机制，有两种变体，经OpenStack验证开销低、安全性优于短生命周期Fernet令牌。
摘要：
在模块化系统开发中，模块化与模块化思维至关重要，因此稳健的认证与授权机制必不可少。传统系统通常采用负责认证和令牌发放的身份模块。代表用户凭证的令牌具备减少对密码的依赖、生命周期有限以及访问范围受限等优势。尽管有这些益处，“持票令牌”问题依然存在，一旦令牌泄露，系统就容易遭受滥用。\n我们提出了一种基于令牌的认证机制，旨在解决模块化系统中关键的持票令牌问题。该机制包含新型RAF（递归增强Fernet）令牌、黑名单组件和策略执行组件。RAF令牌是类似票据的一次性使用令牌，它们携带指令，RAF令牌的接收方可以使用接收到的RAF令牌发放新令牌。黑名单组件确保RAF令牌不会被多次验证通过，策略执行组件则检查RAF令牌携带的指令是否合规。\n我们介绍了RAF令牌的两种变体：用户绑定型RAF，具备简洁性与兼容性；全绑定型RAF，通过服务专属密钥提供更强的安全性。我们结合基于博弈的证明，深入探讨了RAF令牌的安全保障、技术定义与构造方式。我们在OpenStack环境中实现了概念验证，包括对Keystone的修改以及RAFT库的创建。实验结果表明，在典型场景下该机制开销极低，证实了RAF的实用性与有效性。我们的实验显示，RAF机制优于使用短生命周期Fernet令牌的方案，同时能提供更出色的安全性。
英文摘要：
A robust authentication and authorization mechanism is imperative in modular system development, where modularity and modular thinking are pivotal. Traditional systems often employ identity modules responsible for authentication and token issuance. Tokens, representing user credentials, offer advantages such as reduced reliance on passwords, limited lifespan, and scoped access. Despite these benefits, the "bearer token" problem persists, leaving systems vulnerable to abuse if tokens are compromised. We propose a token-based authentication mechanism addressing modular systems' critical bearer token problem. The proposed mechanism includes a novel RAF (Recursive Augmented Fernet) token, a blacklist component, and a policy enforcer component. RAF tokens are one-time-use tokens, like tickets. They carry commands, and the receiver of an RAF token can issue new tokens using the received RAF token. The blacklist component guarantees an RAF token can not be approved more than once, and the policy enforcer checks the compatibility of commands carried by an RAF token. We introduce two variations of RAF tokens: User-tied RAF, offering simplicity and compatibility, and Fully-tied RAF, providing enhanced security through service-specific secret keys. We thoroughly discuss the security guarantees, technical definitions, and construction of RAF tokens backed by game-based proofs. We demonstrate a proof of concept in the context of OpenStack, involving modifications to Keystone and creating an RAFT library. The experimental results reveal minimal overhead in typical scenarios, establishing the practicality and effectiveness of RAF. Our experiments show that the RAF mechanism beats the idea of using short-life Fernet tokens while providing much better security.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
