A Hybrid System for Authentication Service

This paper studies a hybrid system of the public key infrastructure (PKI) and the identity based cryptosystem (IBC). In the hybrid system, an organization runs a private key generator (PKG) and requests a certificate authority to vouch the binding of the PKG's parameters and the organization's distinguished name. Then an authentication scenario is considered where a member of an organization is authenticated by an application server. The whole design pays attention to scalability and adopts caches and password-based protocols for a scalable service and an easy deployment.