Secure and Stateless RESTful Web Service Using ID-Based Encryption

REST protocol has gained great popularity as a communication in the various areas such as web service and IoT devices. However, the current RESTful web service has shortcomings in the authentication process. We developed an ID-based authentication algorithm to achieve a secure and stateless RESTful web service. ID-based authentication process allows a server to handle the client’s request by acknowledging the client’s URI rather than storing client’s state, thereby simplifying the process. In this paper we discuss the shortcomings of current authentication mechanisms, the basic concept of ID-Based Encryption (IBE), and the process of stateless secure REST protocol.