Abstract: | During the last few years wikis have emerged as one of
the most popular tool shells. Wikipedia has boosted their
popularity, but they also keep a significant share in elearning,
intranet-based applications such as defect tracking,
requirements management, test-case management,
and project portals. However, existing wiki systems cannot
fully support mobile clients due to several incompatibilities
that exist. On the top of that, an effective secure
mobile wiki system must be lightweight enough to support
low-end mobile devices having several limitations. In
this paper we analyze the requirements for a novel multiplatform
secure wiki implementation. XML Encryption
and Signature specifications are employed to realize endto-
end confidentiality and integrity services. Our scheme
can be applied selectively and only to sensitive wiki content,
thus diminishing by far computational resources
needed at both ends; the server and the client. To address
authentication of wiki clients a simple one-way authentication
and session key agreement protocol is also introduced.
The proposed solution can be easily applied to
both centralized and forthcoming P2P wiki implementations. |