Problems with this scheme

• Poor scaling properties

• Generalizing the model for m users and n services, requires a priori distribution of m x n shared keys

• Possible improvement:

• Use trusted 3rd party, with which each user and service shares a secret key: m + n keys
• Also has important security advantages