Authentication system for stateless RESTful Web service

摘要

REST protocol is a commonly used Web-based communication interface in various areas (e.g., Web service, IoT devices). Current REST protocol faces several challenges to solve the authentication system. This paper describes an ID-based authentication algorithm using Boneh-Franklin ID-based encryption to achieve a secure and stateless RESTful Web service. This ID-based authentication process allows a server to handle client requests by acknowledging the client's URI rather than storing client's state, thereby simplifying the process. This paper discusses the shortcomings of current authentication mechanisms, the concept of ID-based encryption (IBE), and the process of stateless secure REST protocol.