DigiLock: User-controlled and Server-aware Digital Locker System

TL;DR

DigiLock is a secure digital locker system that ensures confidentiality, integrity, and non-repudiation, allowing user-controlled access while being aware of server-side security considerations.

Contribution

The paper introduces a novel protocol for digital lockers that guarantees security properties and confirmed participation of users and providers.

Findings

Protocol effectively ensures confidentiality and integrity.

Addresses non-repudiation in digital locker access.

Analyzed against potential security threats.

Abstract

The growing popularity of digital systems have paved the way for digital locker that ensures security and safety of the digital documents in store. While facilitating this system to user and availing its services offered by service provider, non-repudiation of service offered and service consumed is an important security requirement in the digital locker system. In this paper, we present a digital locker system that addresses the aspect of confidentiality, integrity, and non-repudiation along with other security properties. The proposed protocol ensures the confirmed participation of the user as well as the service provider while accessing the digital locker. The protocol is analyzed against potential threats in the context of safety and security of the digital locker system.