Bridge certification authorities: connecting B2B public key infrastructure with PAK and zero-knowledge proof

Abstract

Businesses are deploying Public Key Infrastructures (PKIs) to support internal business processes, implement virtual private networks, and secure corporate assets. The ability to establish business relations inside the company as well as wirh other companies in a secure way is important for the operability of business in today's world; corporate PKIs may implement different architectures, security policies, and cryptographic suites in order to accomplish this goal, But communication beyond the PKI is established with other companies based on a trust relationship (B2B), which brings vulnerability provided by PKIs from different companies. A flexible mechanism is needed to link these corporate PKIs and translate corporate relationships with security mechanisms and policies. This is accomplished through a Password Authentication Protocol (PAK), which provides means to authenticate or validate users across Bridge Certijication Authorities (BCA), where certijicates authorities (CA) are limited and mnnot reach over to the other side of the BCA. In such way PAK, can guarantee authentication of end pointswithout modifiing the original PKI structure of companies and offer flexibility in the process of implementation. Additional to this, there are seveml other issues that must be solved; such as the ability to connect different company PIU without compromising any sensible information that might cause a conflict of commercial interests and still guarantee a certain level of security through an accreditation and validation of the parties in order to be certain with who we are doing business. In order to achieve accreditation and validation of PKIs and not expose any sensible information that could compromise either parties, we also based our work on a Zero Knowledge security protocol letting each PKI continue with their security policies without having to a@st to specific needs, achieving a better security level of commercial transactions through such hardening process

Connected Blockchain Federations for Sharing Electronic Health Records

“…In this study, we need to communicate with different blockchains, so cryptographic functions will be carried out among different public keys for the participants of each blockchain. According to [44], isolated CAs can be combined to form larger PKI. This CA combination is created at the communication layer during the integration of B1 and B2 for sharing patient records.…”

An Adaptive Trustworthiness Modelling Approach for Ubiquitous Software Systems

“…These meshed hierarchical models grant high trust values. Examples of such models are bridge certification authorities (BCA) and cross certification authorities (CCA) (Polk and Hastings 2000).…”