Military Communications and Information Technology: A Trusted ...

142 Military Communications and Information Technology...
Figure 5. The authentication protocol for the stateful service. Both the request and response are
signed with the sender’s private key as a part of authentication process. A timestamp, a nonce
and the server’s name is included for replay protection
Figure 6. The authentication protocol for the stateless service. Requests are not reply protected since
this is not considered as a threat, but the response need to be protected for reasons of response replay
and information compromise. For the sake of integrity protection, the request is signed. The encryption
of the response is a part of the authentication scheme, not a privacy measure