Hierarchical Byzantine Fault Tolerant Secure LDAP

The current security mechanism of LDAP system is authenticating and authorizing. It can tolerate attacks occurred on client and the Internet, and benign faults on servers such as crashes. But it can not tolerate Byzantine(malicious) faults on server and software errors. In this paper, a secure hierarchical Byzantine fault tolerant LDAP system is proposed. By using the state-machine replication approach and quorum system technique, the proposed system can tolerate not only benign faults but also Byzantine faults. The proposed system is a hierarchical LDAP. In this system, an optimized key management to reduce the number of messages communication greatly and a secure caching mechanism are designed, and the deal to read-only request is optimized also. With these optimizations, the system can not only provide a much higher degree of security and reliability but also be practical.