Data Structure
Networking
RDBMS
Operating System
Java
MS Excel
iOS
HTML
CSS
Android
Python
C Programming
C++
C#
MongoDB
MySQL
Javascript
PHP
Physics
Chemistry
Biology
Mathematics
English
Economics
Psychology
Social Studies
Fashion Studies
Legal Studies
- Selected Reading
- UPSC IAS Exams Notes
- Developer's Best Practices
- Questions and Answers
- Effective Resume Writing
- HR Interview Questions
- Computer Glossary
- Who is Who
How Does Non-Repudiation Help in Cyber Security?
The certainty that someone cannot dispute the legitimacy of anything is known as non-repudiation. Non-repudiation is a regulatory notion commonly used in cybersecurity and refers to the service that confirms the origin and integrity of data. It assures that no party can deny sending or receiving a communication using encryption and digital signatures. It cannot also contest the legitimacy of its digital signature on a document.
Non-repudiation provides evidence of data's origin, authenticity, and integrity. It verifies the sender that the information is sent and the recipient's identity to the receiver. Neither side can dispute that communication happened or was processed in this manner.
How Does Non-Repudiation Help in Cyber Security?
Non-repudiation uses cryptography, similar to digital signatures, and comprises authentication, auditing, and logging services. Non-repudiation can be accomplished in a variety of methods, such as the digital signing of log data as a checksum during collection or using secured storage media.
In Data Audit Logs
Typically, a digital signature supplied in a hash algorithm is computed against the log file at the time of collection. The output of this computation is a checksum that is used to verify that the files have not been manipulated. If the file is updated in any manner, the hash generates a different value, and the log file fails the integrity check. If the checksum is correct, the log is confirmed to be in its original state.
In Online Transactions
In online transactions, Digital signatures guarantee that a party cannot subsequently dispute delivering information or question the legitimacy of its signature in online transactions. A digital signature is formed by pairing an encrypted key and a public key. Only the holder of the encrypted key has access to this key and can generate this signature, confirming that that holder electronically signed a document, which assures that a person cannot subsequently dispute supplying the signature, hence ensuring non-repudiation.
In Cryptography
Message authentication code (MAC), also called a tag in cryptography, is used for authentication of messages or to certify that the message originated from the specified sender and was not altered along the route. MAC values, unlike digital signatures, are created and confirmed using the same private key, on which the sender and receiver must agree before commencing interactions.
A MAC can prevent message forging by anybody who does not have access to the shared secret key, ensuring both integrity and authenticity. Non-repudiation cannot be provided by MAC methods such as block cipher-based MAC (CMAC) and hash-based MAC (HMAC).
In Digital Contracts and Email
A signatory of an email on one side of communication cannot deny sending the message, and the receiver cannot deny receiving it. Email non-repudiation entails techniques such as email monitoring.
In E-commerce
To aid in conflict resolutions of any kind, Non-repudiation is implemented. It gives confirmation that a message was received and recognised by the receiver. E-Commerce site security is crucial for a variety of reasons, including protecting consumers' privacy and sensitive data on a website, securing an online business's funds, and avoiding fraud and financial scams.
In Business-to-Business Transactions
Non-repudiation is also used in B2B transactions. Non-repudiation allows your business to verify that it received or sent a message from or to a trade partner if a trading partner repudiates the transmission or receiving of messages or receipts. Non-repudiation entails two degrees of security, which are as follows −
Non-repudiation of received or sent communications - Both the transmitting and receiving parties keep the message exchanged (the business document and any attachments) in its original format. The transmitting message service handler (MSH) saves a message before sending it, and the receiving MSH saves a message before processing it.
Non-repudiation of receipts issued after a message is received - A receipt is sent by the receiver of a message to acknowledge receipt of a message. You can exchange a signed receipt, which adds another layer of protection. Signed receipts allow you to confirm the legitimacy of the replying company or individual as well as the content integrity.
A Non-Repudiation-Information element is included in the receipt when signed communications are exchanged with a trade partner. The non-repudiation element includes the message digest transmitted to the trade partner. The sender compares the digest to the original message to verify that the message content was not altered during transmission by an attacker.
5K+ Views
To Continue Learning Please Login