Authentication in TLS is predominately carried out with X.509 digital certificates issued by certificate au-thorities (CA). The centralized nature of current public key infrastructures, however, comes along with severe risks, such as single points of failure and susceptibility to cyber-attacks, potentially undermining the security and trustworthiness of the entire system. With Decentralized Identifiers (DID) alongside distributed ledger technology, it becomes technically feasible to prove ownership of a unique identifier without requiring an attestation of the proof's public key by a centralized and therefore vulnerable CA. This article presents DID Link, a novel authentication scheme for TLS 1.3 that empowers entities to authenticate in a TLS-compliant way with self-issued X.509 certificates that are equipped with ledger-anchored DIDs instead of CA-issued identifiers. It facilitates the exchange of tamper-proof and 3rd-party attested claims in the form of DID-bound Verifiable Credentials after the TLS handshake to complete the authentication with a full identification of the communication partner. A prototypical implementation shows comparable TLS handshake durations of DID Link if verification material is cached and reasonable prolongations if it is obtained from a ledger. The significant speed improvement of the resulting TLS channel over a widely used, DID-based alternative transport protocol on the application layer demonstrates the potential of DID Link to become a viable solution for the establishment of secure and trustful end-to-end communication links with decentrally managed digital identities.

Wireless hand-off control typically considers only connectivity strength from the mobile terminal to alternative access points. In wireless video streaming, however, where video freezing must be avoided at the mobile terminal, the playout buffer level should also be considered by hand-off control. In this paper, we first develop a model capturing hand-off dynamics under video streaming, and design a new playout buffer aware hand-off control. It aims to avert a video freeze for as long as possible, maximizing the expected time until freezing. We compute the optimal control in the general case of multiple access points and multiple connectivity strength states per channel. The optimal hand-off control is then computationally probed in specific relevant cases. It is demonstrated that there is a certain playout buffer threshold level - a buffer tipping point - above which a hand-off should be attempted. Of course, this tipping point depends on the access point to mobile channel statistics.

poster Share on CloudMAC: torwards software defined WLANs Authors: Jonathan Vestin Karlstad University, Karlstad, Sweden Karlstad University, Karlstad, SwedenView Profile , Peter Dely Karlstad University, Karlstad, Sweden Karlstad University, Karlstad, SwedenView Profile , Andreas Kassler Karlstad University, Karlstad, Sweden Karlstad University, Karlstad, SwedenView Profile , Nico Bayer Telekom Innovation Laboratories, Berlin, Germany Telekom Innovation Laboratories, Berlin, GermanyView Profile , Hans Einsiedler Telekom Innovation Laboratories, Berlin, Germany Telekom Innovation Laboratories, Berlin, GermanyView Profile , Christoph Peylo Telekom Innovation Laboratories, Berlin, Germany Telekom Innovation Laboratories, Berlin, GermanyView Profile Authors Info & Claims Mobicom '12: Proceedings of the 18th annual international conference on Mobile computing and networkingAugust 2012Pages 393–396https://doi.org/10.1145/2348543.2348592Published:22 August 2012Publication History 9citation903DownloadsMetricsTotal Citations9Total Downloads903Last 12 Months4Last 6 weeks1 Get Citation AlertsNew Citation Alert added!This alert has been successfully added and will be sent to:You will be notified whenever a record that you have chosen has been cited.To manage your alert preferences, click on the button below.Manage my AlertsNew Citation Alert!Please log in to your account Save to BinderSave to BinderCreate a New BinderNameCancelCreateExport CitationPublisher SiteGet Access