An analysis on the revoking mechanisms for JSON Web Tokens | Zendy

László Viktor Jánoky | Zendy; János Levendovszky | Zendy; Péter Ekler | Zendy

AI Assistant Blog Pricing

Home ZAIA Blog

Open Access

An analysis on the revoking mechanisms for JSON Web Tokens

Author(s) -

László Viktor Jánoky,

János Levendovszky,

Péter Ekler

Publication year - 2018

Publication title -

international journal of distributed sensor networks

Language(s) - English

Resource type - Journals

SCImago Journal Rank - 0.324

H-Index - 53

eISSN - 1550-1477

pISSN - 1550-1329

DOI - 10.1177/1550147718801535

Subject(s) - json , computer science , security token , scalability , ajax , overhead (engineering) , web service , world wide web , the internet , cloud computing , web application , database , distributed computing , computer security , operating system

JSON Web Tokens provide a scalable solution with significant performance benefits for user access control in decentralized, large-scale distributed systems. Such examples would entail cloud-based, micro-services styled systems or typical Internet of Things solutions. One of the obstacles still preventing the wide-spread use of JSON Web Token–based access control is the problem of invalidating the issued tokens upon clients leaving the system. Token invalidation presently takes a considerable processing overhead or a drastically increased architectural complexity. Solving this problem without losing the main benefits of JSON Web Tokens still remains an open challenge which will be addressed in the article. We are going to propose some solutions to implement low-complexity token revocations and compare their characteristics in different environments with the traditional solutions. The proposed solutions have the benefit of preserving the advantages of JSON Web Tokens, while also adhering to stronger securit...

The content you want is available to Zendy users.

Already have an account? Click here to sign in.

Having issues? You can contact us here

Accelerating Research